Azure Management & Governance
Overview
Critical
0High
1Medium
11Low
0Informational
0Security issues (12)
| Severity | Non-Compliance | Resource | Issue | Remediation | Read more | Action |
|---|---|---|---|---|---|---|
| Medium | — | myAssignment | Policy Assignment for Azure Security Benchmark initiative contains disabled policy "System updates should be installed on your machines". | To be notified about the security and critical updates, enable the "systemUpdatesMonitoringEffect" parameter of the Policy Assignment. | More info | |
| Medium | — | myAssignment | Policy Assignment for Azure Security Benchmark initiative contains disabled policy "Vulnerabilities in security configuration on your machines should be remediated". | To allow Defender for Cloud determine if your Virtual Machines are vulnerable to attacks, enable the "systemConfigurationsMonitoringEffect" parameter of the Policy Assignment. | More info | |
| Medium | — | myAssignment | Policy Assignment for Azure Security Benchmark initiative contains disabled policy "Monitor missing Endpoint Protection in Azure Security Center". | To allow Defender for Cloud identify and remove malware from your Virtual Machines, enable the "endpointProtectionMonitoringEffect" parameter of the Policy Assignment. | More info | |
| Medium | — | myAssignment2 | Policy Assignment for Azure Security Benchmark initiative contains disabled policy "System updates should be installed on your machines". | To be notified about the security and critical updates, enable the "systemUpdatesMonitoringEffect" parameter of the Policy Assignment. | More info | |
| Medium | — | myAssignment2 | Policy Assignment for Azure Security Benchmark initiative contains disabled policy "Vulnerabilities in security configuration on your machines should be remediated". | To allow Defender for Cloud determine if your Virtual Machines are vulnerable to attacks, enable the "systemConfigurationsMonitoringEffect" parameter of the Policy Assignment. | More info | |
| Medium | — | myAssignment2 | Policy Assignment for Azure Security Benchmark initiative contains disabled policy "Monitor missing Endpoint Protection in Azure Security Center". | To allow Defender for Cloud identify and remove malware from your Virtual Machines, enable the "endpointProtectionMonitoringEffect" parameter of the Policy Assignment. | More info | |
| Medium | — | SecurityCenterBuiltIn | Policy Assignment for Azure Security Benchmark initiative contains disabled policy "System updates should be installed on your machines". | To be notified about the security and critical updates, enable the "systemUpdatesMonitoringEffect" parameter of the Policy Assignment. | More info | |
| High | CIS 2.6 | SecurityCenterBuiltIn | The default set of policies monitored by Defender for Cloud contains 1 disabled policy. | To meet security and compliance requirements, ensure that all security policies (specified as parameters) provided by Defender for Cloud default policy (ASC Default) are enabled. | More info | |
| Medium | — | SqlServers | Standard pricing is not enabled for the service "SqlServers". | To enable enhanced security features, such as regulatory compliance reports or threat protection, enable Microsoft Defender for Cloud for all resources in your subscription. | More info | |
| Medium | — | SqlServerVirtualMachines | Standard pricing is not enabled for the service "SqlServerVirtualMachines". | To enable enhanced security features, such as regulatory compliance reports or threat protection, enable Microsoft Defender for Cloud for all resources in your subscription. | More info | |
| Medium | — | OpenSourceRelationalDatabases | Standard pricing is not enabled for the service "OpenSourceRelationalDatabases". | To enable enhanced security features, such as regulatory compliance reports or threat protection, enable Microsoft Defender for Cloud for all resources in your subscription. | More info | |
| Medium | — | CosmosDbs | Standard pricing is not enabled for the service "CosmosDbs". | To enable enhanced security features, such as regulatory compliance reports or threat protection, enable Microsoft Defender for Cloud for all resources in your subscription. | More info |
Policy (8)
| Policy assignment | Display name | Tier | Created | Security issues |
|---|---|---|---|---|
| Defender for Containers provisioning Azure Policy Addon for Kub | — | — | — | |
| Defender for Containers provisioning Policy extension for Arc-e | — | — | — | |
| e453cc676e184df39cd90a97 | — | — | — | |
| myAssignment | — | — | 3 Medium (details) | |
| myAssignment2 | — | — | 3 Medium (details) | |
| SecurityCenterBuiltIn | — | — | 1 High + 1 other (details) | |
| 5043cbe9488e4fde89e18e4f | — | — | — | |
| 7dabc4a2e1c54699994b05cc | — | — | — |
Pricing (13)
| Pricing name | Pricing tier | Supported | Free trial remaining, days | Security issues |
|---|---|---|---|---|
| VirtualMachines | Standard | ✓ | 25 days | — |
| SqlServers | Free | ✓ | 25 days | 1 Medium (details) |
| AppServices | Standard | ✓ | 25 days | — |
| StorageAccounts | Standard | ✓ | 25 days | — |
| SqlServerVirtualMachines | Free | ✓ | 25 days | 1 Medium (details) |
| KubernetesService | Free | ⨉ | 25 days | — |
| ContainerRegistry | Free | ⨉ | 25 days | — |
| KeyVaults | Standard | ✓ | 25 days | — |
| Dns | Standard | ✓ | 25 days | — |
| Arm | Standard | ✓ | 25 days | — |
| OpenSourceRelationalDatabases | Free | ✓ | 25 days | 1 Medium (details) |
| CosmosDbs | Free | ✓ | 25 days | 1 Medium (details) |
| Containers | Standard | ✓ | 25 days | — |
Role definitions (0)
| Role definition | Type | Created | Security issues |
|---|