Incident simulations
Exit

INC-3110 · P2

MasterLinux Fez agency: last night's customs declarations were not sent, the export script fails at sign-in

Fez · Entra tenant “masterlinux.lab” · westeurope · MasterLinux · 07:55

The MasterLinux agency in Fez, which clears containers through customs for handicraft exporters, runs a script export-douane.sh every night at 02:00 on the VM vm-batch-01 (resource group rg-batch-prod, region westeurope). The script signs in to Azure with the account svc-export@masterlinux.lab (az login -u … -p …), uploads the declarations to a storage account and triggers their submission.

Yesterday at 18:30, the security team enabled a series of Conditional Access policies prepared for a month in “report-only” mode, as part of the “MFA for everyone” project. They assure you that technical accounts were “taken into account”.

This morning, 38 declarations were not sent: containers risk missing the 14:00 ship at the port of Tanger Med. The account password is in the vault, unchanged.

You are on your workstation with the Azure CLI signed in as an administrator (“Conditional Access Administrator” and “Groups Administrator” roles).

This simulation is part of a production simulation pack.

Unlock every production simulation

AWS, Azure, Google Cloud, on-premise and multi-cloud, from Beginner to Extreme: the real incidents of IT service companies and large IT organisations, available for a year.

Try the free demo simulation first

Already enrolled? Log in.