Need to audit an Azure environment, any tip?

• steampipe-mod-azure-compliance

  2 50 7.7 HCL

  Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, HIPAA HITRUST, NIST, and more across all of your Azure subscriptions using Powerpipe and Steampipe.

  

One other thing I've been meaning to R&D is SteamPipe's Azure Compliance Mod , which is open source and looks to make life a bit easier

• steampipe-plugin-sdk

  9 29 9.1 Go

  Steampipe Plugin SDK is a simple abstraction layer to write a Steampipe plugin. Plugins automatically work across all engine types including the Steampipe CLI, Postgres FDW, SQLite extension and the export CLI.

  

For some background, the Steampipe CLI provides an open source, common SQL interface to query join and report from your cloud APIs (e.g. Azure, AWS, GitHub, AzureAD, M365, etc).

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• steampipe-plugin-aws

  8 171 9.3 Go

  Use SQL to instantly query AWS resources across regions and accounts. Open source CLI. No DB required.

  

It's a very similar approach querying any of the plugins (AWS, Azure, etc) as it's a common interface to query those APIs with SQL. The AWS plugin is one of the more widely used in the community, along with it's associated mods to visualize resources and compliance to security & ops benchmarks.

Suggest a related project