This repository serves a reference table and the script that renders it. A security problem here is a row that maps a control to a comparable that does not provide the same protection, so that a reader carries a false assumption across clouds, or a change to the render script that makes the table say something its source does not. Both are treated as vulnerabilities.

Report suspected problems privately through GitHub's security advisories, at https://github.com/tltaylor1/aws-azure-security-mapping/security/advisories/new, which is the Security tab of this repository, then "Report a vulnerability." Do not open a public issue or pull request for a suspected vulnerability before it has been triaged.

A useful report includes the affected file or behavior, the impact as you understand it, and reproduction steps. Do not include real credentials or personal data in a report.

What to expect: acknowledgment within seven days, a triage answer within fourteen, and disclosure coordinated with the reporter once a fix exists.