Repository navigation

sec(iac): scope Azure purchase role to onboarded subscription - #1658

Merged

cristim merged 10 commits into

mainfrom

sec/1545-arm-role-scope

Aug 4, 2026

Commits on Aug 3, 2026

sec(iac): scope Azure purchase role to onboarded subscription
cristim
committed
1315584
sec(iac): close scope-guard bypasses in Azure role parity check
cristim
committed
51a15f0
sec(iac): close remaining Azure role parity guard bypasses
cristim
committed
3fcb92a
sec(iac): harden normalizer and scope recursive walks to .resources
cristim
committed
af8bbc3
sec(iac): normalize ARM key casing, refuse PIM/legacy grant types
cristim
committed
53f5c94
sec(iac): explicit case-folding for scope/roleDefinitionId comparisons
cristim
committed
61027bd
test(iac/azure): use a real HCL reference in the TF-flag regression
cristim
committed
ac1d258
docs(known-issues): make the #1545 revocation check able to see a tenant grant
cristim
committed
8ebcdb1
sec(iac/azure): refuse ARM templates with case-variant key collisions
cristim
committed
ed8e6a3
sec(iac): scan root object and every provider for legacy child-scoped roleAssignments
cristim
committed
34b4138