Description

Detects if an Azure subscription is missing the "Not allowed resource types" policy assignment. This policy is critical for controlling what types of Azure resources can be provisioned within a subscription, helping prevent the creation of unauthorized or potentially insecure resource types.

Detection Strategy

• Retrieves all policy assignments for the specified Azure subscription

• Checks if 'Not allowed resource types' policy is present in the list of assigned policies

• Reports a vulnerability if the policy is not found in the subscription's policy assignments