Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Azure 'Access Keys Not Rotated' rule flags storage accounts with access key support disabled #1609

Closed
rieck-srlabs opened this issue Feb 27, 2024 · 1 comment
Labels
bug Something isn't working potential Unconfirmed issue

Comments

@rieck-srlabs
Copy link
Contributor

Describe the bug

ScoutSuite incorrectly flags Storage Accounts that do not allow access keys as having never been rotated.

To Reproduce

Create a storage account that does not permit access key-based access using the az CLI tool:

$ az group create --location germanywestcentral --resource-group storage-account-tests
$ az storage account create --name 'account2rg2rg2r62r' --resource-group 'storage-account-tests' --allow-shared-key-access false --access-tier Hot | jq '.allowSharedKeyAccess'
# Access key-based access not allowed
false

Run ScoutSuite with default parameters:

scout azure --cli

The report will incorrectly flag account2rg2rg2r62r as having never rotated its access key, despite the storage account not even supporting access keys:

Screenshot 2024-02-27 at 16 43 44

Additional context

n/a

@rieck-srlabs rieck-srlabs added bug Something isn't working potential Unconfirmed issue labels Feb 27, 2024
@rieck-srlabs
Copy link
Contributor Author

Closing issue, as the fix was merged and is included in the latest release.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
bug Something isn't working potential Unconfirmed issue
Projects
None yet
Development

No branches or pull requests

1 participant