BSI.AzCompliance
3.0.0
BSI IT-Grundschutz++ compliance validation for Azure 3-tier deployments. Self-contained PowerShell module with embedded OSCAL catalog mapping. Supports local script analysis, remote Azure resource validation, and SARIF/JUnit/HTML export for CI/CD integration.
Minimum PowerShell version
5.1
Installation Options
Owners
Copyright
(c) 2026 Valerii Dundukov. MIT License.
Package Details
Author(s)
- Valerii Dundukov
Tags
BSI Compliance Azure IT-Grundschutz OSCAL Security Cloud DevSecOps
Functions
Invoke-BsiCompliance Get-BsiControlStatus New-BsiComplianceReport Export-Console Export-Json Export-Sarif Export-JUnitXml Export-Html Reset-BsiResults Get-BsiSummary Add-BsiResult Add-BsiResultObject New-BsiComplianceResult Sync-BsiCatalog Get-BsiMapping Get-BsiCatalogControls Get-AzCliResponse Test-AzCliReady Test-NsgDenyInbound Test-VNetSubnets Test-NoPublicIp Test-VNetPeering Test-BastionExists Test-NatGateway Test-DiskEncryption Test-TlsVersion Test-VmImageVersion Test-ManagedIdentity Test-KeyVaultConfig Test-RbacRoles Test-AzureBackup Test-RecoveryServicesVault Test-FlowLogs Test-NetworkWatcher Test-DiagnosticSettings Test-AzurePolicy
Dependencies
This module has no dependencies.
FileList
- BSI.AzCompliance.nuspec
- Scripts\Invoke-BsiCompliance.ps1
- Private\Get-AzCliResponse.ps1
- docs\CONFIG.md
- Tests\Integration\trap-06-missing-rgname.ps1
- Checks\VM\Test-VmImageVersion.ps1
- Checks\Network\Test-NsgDenyInbound.ps1
- Checks\Monitoring\Test-DiagnosticSettings.ps1
- Public\New-BsiComplianceReport.ps1
- Exporters\Export-Sarif.ps1
- docs\BSI-AzCompliance-Design.md
- Tests\Integration\trap-05-with-special-chars.ps1
- Checks\VM\Test-TlsVersion.ps1
- Checks\Network\Test-NoPublicIp.ps1
- Checks\Identity\Test-RbacRoles.ps1
- README.md
- Public\Invoke-BsiCompliance.ps1
- Exporters\Export-JUnitXml.ps1
- Data\bsi-azure-mapping.json
- Tests\Integration\trap-04-fully-compliant.ps1
- Checks\VM\Test-DiskEncryption.ps1
- Checks\Network\Test-NatGateway.ps1
- Checks\Identity\Test-ManagedIdentity.ps1
- LICENSE
- Public\Get-BsiControlStatus.ps1
- Exporters\Export-Json.ps1
- Classes\ComplianceResult.ps1
- Tests\Integration\trap-03-partial-compliant.ps1
- Checks\Policy\Test-AzurePolicy.ps1
- Checks\Network\Test-BastionExists.ps1
- Checks\Identity\Test-KeyVaultConfig.ps1
- CHANGELOG.md
- Private\Resolve-BsiMapping.ps1
- Exporters\Export-Html.ps1
- Checks\_CheckManifest.json
- Tests\Integration\trap-02-comments-only.ps1
- Checks\Network\Test-VNetSubnets.ps1
- Checks\Monitoring\Test-NetworkWatcher.ps1
- Checks\Backup\Test-RecoveryServicesVault.ps1
- BSI.AzCompliance.psm1
- Private\Get-BsiConfigValidation.ps1
- Exporters\Export-Console.ps1
- Tests\Integration\trap-07-large-script.ps1
- Tests\Integration\trap-01-empty.ps1
- Checks\Network\Test-VNetPeering.ps1
- Checks\Monitoring\Test-FlowLogs.ps1
- Checks\Backup\Test-AzureBackup.ps1
- BSI.AzCompliance.psd1
- Private\Get-BsiCatalogData.ps1
- Enums\Severity.ps1
- Tests\BSI.AzCompliance.Tests.ps1
Version History
| Version | Downloads | Last updated |
|---|---|---|
| 3.0.0 (current version) | 4 | 7/25/2026 |