maester-tests/Maester/GlobalSecureAccess/Test-MtGsaPrivateAccessAppNotOnDefaultConnectorGroup.Tests.ps1

Describe "Maester/Entra" -Tag "Maester", "Entra" {
    It "MT.1190: Entra Private Access applications should not use the Default connector group. See https://maester.dev/docs/tests/MT.1190" -Tag "MT.1190", "Preview" {
        $result = Test-MtGsaPrivateAccessAppNotOnDefaultConnectorGroup

        if ($null -ne $result) {
            $result | Should -Be $true -Because "new connectors auto-join Default, so serving apps from it risks routing production traffic through unintended connectors."
        }
    }
}