Azure.Preview_2023_06#
Warning
This baseline is obsolete. Consider switching to a newer baseline.
Include rules released June 2023 or prior for Azure preview only features.
Rules#
The following rules are included within Azure.Preview_2023_06. This baseline includes a total of 13 rules.
| Name | Synopsis | Severity |
|---|---|---|
| Azure.ACR.Quarantine | Enable container image quarantine, scan, and mark images as verified. | Important |
| Azure.ACR.Retention | Use a retention policy to cleanup untagged manifests. | Important |
| Azure.ACR.SoftDelete | Azure Container Registries should have soft delete policy enabled. | Important |
| Azure.APIM.DefenderCloud | APIs published in Azure API Management should be onboarded to Microsoft Defender for APIs. | Critical |
| Azure.AppConfig.GeoReplica | Consider replication for app configuration store to ensure resiliency to region outages. | Important |
| Azure.Arc.Kubernetes.Defender | Deploy Microsoft Defender for Containers extension for Arc-enabled Kubernetes clusters. | Important |
| Azure.Arc.Server.MaintenanceConfig | Use a maintenance configuration for Arc-enabled servers. | Important |
| Azure.Defender.Api | Enable Microsoft Defender for APIs. | Critical |
| Azure.Defender.Storage.MalwareScan | Enable Malware Scanning in Microsoft Defender for Storage. | Critical |
| Azure.Defender.Storage.SensitiveData | Enable sensitive data threat detection in Microsoft Defender for Storage. | Critical |
| Azure.Storage.DefenderCloud.MalwareScan | Enable Malware Scanning in Microsoft Defender for Storage. | Critical |
| Azure.Storage.DefenderCloud.SensitiveData | Enable sensitive data threat detection in Microsoft Defender for Storage. | Critical |
| Azure.VM.MaintenanceConfig | Use a maintenance configuration for virtual machines. | Important |
Last update:
2023-10-01