Azure joins the module catalog

We have added Azure to the module catalog. Eleven modules bring more than 110 classes and more than 1,200 threats defined in policy, alongside the existing AWS, Kubernetes and self-managed modules.

A class describes one type of element in a model. Assign one to a component and you get the questions for that service, a guide for checking each answer, and the exposures your answers lead to. Most exposures link to MITRE ATT&CK techniques, and to sources where the threat cites any.

The modules cover:

• Compute and containers: AKS, App Service, Functions, Container Apps and virtual machines.
• Data and storage: storage accounts, Cosmos DB, SQL Database and Managed Redis.
• Identity and cryptography: Entra ID, Key Vault, managed identities, Conditional Access and PIM.
• Network and edge: Front Door, Application Gateway, Azure Firewall and network security groups.
• Other services: detection and governance, AI and analytics, application integration, developer tools, hybrid management with Arc, IoT and end-user computing.

These are commercial modules, not part of the open-source edition. They will be sold as an Azure package in BYODt, our subscription edition, which is in development. The full catalog is on the modules page.