This workflow template is implemented to manage a critical security issue: the creation of a Network Security Group (NSG) rule that allows open access to the internet (0.0.0.0/0 ingress rule). Upon detection of such a rule, the workflow initiates a security protocol: it extracts details on the insecure rule, prompts the DevOps team for permission to delete it through Slack communication, and upon approval, proceeds to delete the rule(s) while keeping the DevOps team updated via Slack. This ensures tight collaboration between security monitoring and operations teams, maintaining cloud security posture management (CSPM) standards.
Trigger
Gem
Use Cases
CSPM
Workflow Breakdown
Extract all any (0.0.0.0/0) ingress rules from the NSG
Approve rules deletion with the DevOps team in Slack
If approved, delete the rules one by one and update the DevOps team in Slack
Vendors
Slack, Microsoft Azure, Utils, Gem