Findings by source

Azure OpenAI: aoai-prod-eastus

Azure & Power Platform Microsoft · Cloud AI platform · resource type microsoft.cognitiveservices/accounts (OpenAI)

Policy · none set
Policy changes re-score this app on the next sync, which starts right away.
Finding · Open
Risk score
30
Medium
People
1
Owner tag on the resource
Network
Private
Entra auth only
Deployments
2
gpt-4o, text-embedding-3-large
azurefirst-partymodel-deployments
Next steps

Recommended actions

  1. 012 model deployments (gpt-4o, text-embedding-3-large). Confirm content filtering and abuse monitoring are on, and that logging captures prompts if your policy requires it.
Billing · Azure

What it costs

Last 30 days
$2,665
Previous 30
$1,733
Change
+54%
2026-06-16: 282026-06-17: 252026-06-18: 312026-06-19: 242026-06-20: 112026-06-21: 102026-06-22: 262026-06-23: 322026-06-24: 282026-06-25: 262026-06-26: 362026-06-27: 112026-06-28: 112026-06-29: 332026-06-30: 292026-07-01: 382026-07-02: 352026-07-03: 332026-07-04: 122026-07-05: 142026-07-06: 352026-07-07: 422026-07-08: 412026-07-09: 402026-07-10: 402026-07-11: 152026-07-12: 142026-07-13: 452026-07-14: 382026-07-15: 362026-07-16: 422026-07-17: 482026-07-18: 132026-07-19: 172026-07-20: 442026-07-21: 562026-07-22: 642026-07-23: 612026-07-24: 632026-07-25: 252026-07-26: 232026-07-27: 652026-07-28: 632026-07-29: 712026-07-30: 692026-07-31: 752026-08-01: 272026-08-02: 222026-08-03: 812026-08-04: 762026-08-05: 822026-08-06: 782026-08-07: 872026-08-08: 262026-08-09: 302026-08-10: 792026-08-11: 832026-08-12: 892026-08-13: 842026-08-14: 892026-08-15: 312026-08-16: 302026-08-17: 922026-08-18: 882026-08-19: 1012026-08-20: 992026-08-21: 972026-08-22: 352026-08-23: 392026-08-24: 1002026-08-25: 1082026-08-26: 1072026-08-27: 1052026-08-28: 1082026-08-29: 412026-08-30: 412026-08-31: 1052026-09-01: 1102026-09-02: 1322026-09-03: 1172026-09-04: 1312026-09-05: 432026-09-06: 462026-09-07: 1212026-09-08: 1442026-09-09: 1172026-09-10: 1432026-09-11: 1362026-09-12: 512026-09-13: 48
06-1609-13
Contoso Production $1,909 · Contoso Sandbox $756
Azure

Resource posture

Resource
/subscriptions/5c2e1f4a-1111-4a5b-9c8d-000000000001/resourceGroups/rg-ai-prod/providers/Microsoft.CognitiveServices/accounts/aoai-prod-eastus
Type
microsoft.cognitiveservices/accounts (OpenAI)
Subscription
5c2e1f4a-1111-4a5b-9c8d-000000000001
Resource group
rg-ai-prod
Region
eastus
Public network
disabled
Local auth (keys)
disabled
Managed identity
yes
Model deployments
DeploymentModelVersion
gpt-4ogpt-4o2024-11-20
text-embedding-3-largetext-embedding-3-large1
Tagsowner: [email protected]costcenter: R&D
Same app, other lanes

Related findings

Who

People

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

PersonDepartmentSourceSign-ins · 30 dGranted
n/aPlatform owner or maker0No direct grant
Why

Evidence

  1. azure_resource
    Azure OpenAI resource 'aoai-prod-eastus' in rg-ai-prod (eastus), subscription 5c2e1f4a: 2 deployments
    Detail
    {
      "kind": "OpenAI",
      "tags": {
        "owner": "[email protected]",
        "costcenter": "R&D"
      },
      "resourceId": "/subscriptions/5c2e1f4a-1111-4a5b-9c8d-000000000001/resourceGroups/rg-ai-prod/providers/Microsoft.CognitiveServices/accounts/aoai-prod-eastus",
      "deployments": [
        {
          "name": "gpt-4o",
          "model": "gpt-4o",
          "version": "2024-11-20"
        },
        {
          "name": "text-embedding-3-large",
          "model": "text-embedding-3-large",
          "version": "1"
        }
      ],
      "localAuthDisabled": true,
      "publicNetworkAccess": false
    }