Control: 2.15 Ensure that 'All users with the following roles' is set to 'Owner'
Description
Enable security alert emails to subscription owners. Enabling security alert emails to subscription owners ensures that they receive security alert emails from Microsoft. This ensures that they are aware of any potential security issues and can mitigate the risk in a timely fashion.
Remediation
From Console
- Login to Azure console and navigate to Security Center.
- Select
Pricing & settings
blade under Management. - Click on the appropriate Management Group, Subscription, or Tenant.
- Click on
Email notifications
. - Under
Email recipient
, selectOwner
in the drop down of theAll users with the following roles
field. - Click Save.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.cis_v130_2_15
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.cis_v130_2_15 --share
SQL
This control uses a named query:
securitycenter_security_alerts_to_owner_enabled