turbot/azure_compliance

Control: 2.15 Ensure that 'All users with the following roles' is set to 'Owner'

Description

Enable security alert emails to subscription owners. Enabling security alert emails to subscription owners ensures that they receive security alert emails from Microsoft. This ensures that they are aware of any potential security issues and can mitigate the risk in a timely fashion.

Remediation

From Console

  1. Login to Azure console and navigate to Security Center.
  2. Select Pricing & settings blade under Management.
  3. Click on the appropriate Management Group, Subscription, or Tenant.
  4. Click on Email notifications.
  5. Under Email recipient, select Owner in the drop down of the All users with the following roles field.
  6. Click Save.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.cis_v130_2_15

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.cis_v130_2_15 --share

SQL

This control uses a named query:

securitycenter_security_alerts_to_owner_enabled

Tags