Azure Tenant ID Exposure

Description

Detects the exposure of Microsoft Azure Domain Tenant ID in the application.

To remediate Azure Tenant ID Exposure:

Review and restrict access to any services or components that may expose the Tenant ID unnecessarily.
Implement proper access controls and permissions to ensure that only authorized users can retrieve the Tenant ID.
Use Azure Policy to audit and enforce security controls that prevent Tenant ID exposure.
Regularly audit your Azure environment for exposed Tenant IDs and take corrective actions if any are found.
Educate users and developers about the risks of exposing sensitive information, including Tenant IDs.
Ensure that logging and monitoring are in place to detect any unauthorized access or exposure of Tenant IDs.
If a Tenant ID has been exposed, assess the potential impact and consider rotating any secrets or credentials that may be affected.

Identifier: information_disclosure/azure_tenant_id_exposure

checks:
  information_disclosure/azure_tenant_id_exposure:
    skip: true