Project: KICS (Provisioning / Security & Compliance)
File: 1bc398a8-d274-47de-a4c8-6ac867b353de.md

title: Trusted Microsoft Services Not Enabled hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 1bc398a8-d274-47de-a4c8-6ac867b353de Query name: Trusted Microsoft Services Not Enabled Platform: Ansible Severity: <span style="color:#ff7213">Medium</span> Category: Networking and Firewall URL: Trusted Microsoft Services should be enabled for Storage Account access<br> ```yaml title="Positive test num. 1 - yaml file" hl_lines="24 40 7" name: configure firewall and virtual networks azurermstorageaccount: resource_group: myResourceGroup name: clh0002 type: Standard_RAGRS network_acls: bypass: Metrics default_action: Deny virtualnetworkrules: id: /subscriptions/mySubscriptionId/resourceGroups/myResourceGroup/providers/Microsoft.Network/virtualNetworks/myVnet/subnets/mySubnet action: Allow ip_rules: value: 1.2.3.4 action: Allow value: 123.234.123.0/24 action: Allow name: configure firewall and virtual networks2 azurermstorageaccount: resource_group: myResourceGroup name: clh0003 type: Standard_RAGRS network_acls: default_action: Deny bypass: Metrics,Logging virtualnetworkrules: id: /subscriptions/mySubscriptionId/resourceGroups/myResourceGroup/providers/Microsoft.Network/virtualNetworks/myVnet/subnets/mySubnet action: Allow ip_rules: value: 1.2.3.4 action: Allow value: 123.234.123.0/24 action: Allow name: configure firewall and virtual networks3 azurermstorageaccount: resource_group: myResourceGroup name: clh0004 type: Standard_RAGRS network_acls: default_action: Deny bypass: "" virtualnetworkrules: id: /subscriptions/mySubscriptionId/resourceGroups/myResourceGroup/providers/Microsoft.Network/virtualNetworks/myVnet/subnets/mySubnet action: Allow ip_rules: value: 1.2.3.4 action: Allow value: 123.234.123.0/24 action: Allow ``` ```yaml title="Negative test num. 1 - yaml file" name: configure firewall and virtual networks azurermstorageaccount: resource_group: myResourceGroup name: clh0002 type: Standard_RAGRS network_acls: bypass: AzureServices,Metrics default_action: Deny virtualnetworkrules: id: /subscriptions/mySubscriptionId/resourceGroups/myResourceGroup/providers/Microsoft.Network/virtualNetworks/myVnet/subnets/mySubnet action: Allow ip_rules: value: 1.2.3.4 action: Allow value: 123.234.123.0/24 action: Allow name: configure firewall and virtual networks2 azurermstorageaccount: resource_group: myResourceGroup name: clh0003 type: Standard_RAGRS network_acls: default_action: Deny virtualnetworkrules: id: /subscriptions/mySubscriptionId/resourceGroups/myResourceGroup/providers/Microsoft.Network/virtualNetworks/myVnet/subnets/mySubnet action: Allow ip_rules: value: 1.2.3.4 action: Allow value: 123.234.123.0/24 action: Allow name: configure firewall and virtual networks3 azurermstorageaccount: resource_group: myResourceGroup name: clh0004 type: Standard_RAGRS network_acls: default_action: Deny bypass: AzureServices virtualnetworkrules: id: /subscriptions/mySubscriptionId/resourceGroups/myResourceGroup/providers/Microsoft.Network/virtualNetworks/myVnet/subnets/mySubnet action: Allow ip_rules: value: 1.2.3.4 action: Allow value: 123.234.123.0/24 action: Allow ```