SubWatcher: Auditing Azure RBAC & Subscription Access
Igal Flegmann introduces SubWatcher, an open-source tool to monitor Azure RBAC assignments, scan subscriptions, and detect unauthorized access paths.
Summary
The Complexity of Azure Role-Based Access Control
In large Microsoft Azure environments, tracking effective RBAC permissions across subscriptions, resource groups, and service principals is notoriously difficult.
Introducing SubWatcher for Azure RBAC Auditing
Igal Flegmann presents SubWatcher, an open-source tool developed to continuously scan Azure subscriptions and map role assignments.
Detecting Unauthorized and Overprivileged Access
SubWatcher identifies risky access configurations, such as external guest accounts assigned Owner roles, orphaned service principals, and unauthorized role grants.
Automating Continuous Subscription Governance
Flegmann demonstrates integrating SubWatcher into CI/CD pipelines and alerting workflows to enforce least-privilege RBAC standards.
Related talks
Blue Team Village·26 min
Henry
Henry delivers an energetic, practical guide to securing multi-cloud environments, eliminating dangling DNS, exposed storage buckets, and IAM privilege sprawl.
Videos·3 min
Industry experts analyze emerging threats surrounding AttackIQ Cloud Security Optimization for Azure.
Videos·41 min
Industry experts analyze emerging threats surrounding Automated Testing and Cloud Security: Azure and AWS.