Pipeline: 3.1.9.1 Ensure That Microsoft Defender for Resource Manager Is Set To 'On'

Description

Microsoft Defender for Resource Manager scans incoming administrative requests to change your infrastructure from both CLI and the Azure portal.

Scanning resource requests lets you be alerted every time there is suspicious activity in order to prevent a security threat from being introduced.

Use the below command to enable Standard pricing tier for Defender for Resource Manager

az security pricing create -n 'Arm' --tier 'Standard'

Use the below command to enable Standard pricing tier for Defender for Resource Manager

Set-AzSecurityPricing -Name 'Arm' -PricingTier 'Standard'

By default, Microsoft Defender for Resource Manager is not enabled.

To run this pipeline from your terminal:

flowpipe pipeline run azure_cis.pipeline.cis_v300_3_1_9_1

To call this pipeline from your pipeline, use a step:

step "pipeline" "step_name" {
  pipeline = azure_cis.pipeline.cis_v300_3_1_9_1  
}

Name	Type	Required	Description	Default
database	connection.steampipe	Yes	Database connection string.	`connection.steampipe.default`
notifier	notifier	Yes	The name of the notifier to use for sending notification messages.	`notifier.default`
notification_level	string	Yes	The verbosity level of notification messages to send. Valid options are 'verbose', 'info', 'error'.	`info`
approvers	list(notifier)	Yes	List of notifiers to be used for obtaining action/approval decisions.	`notifier.default`

This pipeline has no outputs.