Make CIS findings public and add their CIS id to their rationale attr…

…ibute.

ScoutSuite/providers/azure/rules/findings/storageaccount-account-allowing-clear-text.json

@@ -1,6 +1,7 @@
 {
     "description": "HTTPS Not Enforced",
     "path": "storageaccounts.storage_accounts.id",
+    "rationale": "You should ensure that secure transfer is required to access your storage accounts. See CIS 3.1.",
     "dashboard_name": "Accounts",
     "conditions": [ "and",
         [ "storageaccounts.storage_accounts.id.https_traffic_enabled", "false", "" ]

ScoutSuite/providers/azure/rules/findings/storageaccount-public-blob-container.json

@@ -0,0 +1,11 @@
+{
+    "dashboard_name": "Storage Accounts",
+    "description": "Public Blob Container",
+    "rationale": "Your blob containers should be private. See CIS 3.7.",
+    "path": "storageaccounts.storage_accounts.id.blob_containers.id",
+    "display_path": "storageaccounts.storage_accounts.id",
+    "conditions": [ "and",
+        [ "storageaccounts.storage_accounts.id.blob_containers.id.public_access_allowed", "true", "" ]
+    ],
+    "id_suffix": "public_access_allowed"
+}

ScoutSuite/providers/azure/rules/rulesets/default.json

@@ -6,6 +6,18 @@
         "enabled": true,
         "level": "warning"
       }
+    ],
+    "storageaccount-public-blob-container.json": [
+      {
+        "enabled": true,
+        "level": "danger"
+      }
+    ],
+    "storageaccount-access-keys-not-rotated.json": [
+      {
+        "enabled": true,
+        "level": "warning"
+      }
     ]
   }
 }