Scripts
Every script has built-in help (Get-Help .\Script.ps1 -Full). All are read-only, and each writes a CSV plus a .sha256 file with the hash, who ran it, when and with which parameters.
Access control
Who can reach GxP scope, as a review worksheet.
- Get-AzGxPAccessReview
Builds a periodic access review worksheet for GxP-tagged Azure subscriptions and resource groups.
Audit trails and compliance
Platform logs exported, tamper-evident and kept long enough.
- Get-AzGxPAuditLogCoverage
Checks that Azure activity logs and resource logs for GxP scope are exported and kept long enough.
- Get-AwsGxPAuditTrailStatus
Checks that CloudTrail and AWS Config give GxP accounts a complete, tamper-evident audit trail.
- Get-AwsGxPConformanceReport
Exports AWS Config conformance pack results, such as the FDA 21 CFR Part 11 pack, as review evidence.
Backup and restore
Protected backups, and proof that restores work.
- Get-AzGxPBackupEvidence
Collects Azure Backup evidence for GxP scope: vault protection, last backup per item, and restore tests.
- Get-AwsGxPRestoreEvidence
Collects AWS Backup evidence for GxP accounts: vault lock, restore testing plans and restore jobs.
Controlled documents
SharePoint library settings for GxP records.
- Get-SPOGxPLibraryControls
Checks SharePoint Online document libraries that hold GxP records against a baseline of library settings.