Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(entra): add new check entra_thirdparty_integrated_apps_not_allowed #6357

Open
wants to merge 1 commit into
base: PRWLR-5859-create-new-entra-service-for-microsoft-365
Choose a base branch
from

Conversation

MarioRgzLpz
Copy link
Member

Context

App registration allows users to register custom-developed applications for use within the directory.

Third-party integrated applications connection to services should be disabled unless there is a very clear value and robust security controls are in place. While there are legitimate uses, attackers can grant access from breached accounts to third party applications to exfiltrate data from your tenancy without having to maintain the breached account.

Description

Added check entra_thirdparty_integrated_apps_not_allowed with metadata and respective unit tests.

Checklist

License

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@MarioRgzLpz MarioRgzLpz requested review from a team as code owners January 4, 2025 09:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant