Ensure VM extensions are not installed on Linux VM's in Azure Linux Virtual Machine

MEDIUM

Description

VM extensions are found to be installed on Linux VM's Azure Linux Virtual Machine, this may compromise security by allowing access to unauthorized actors.

Remediation

In Azure Console -

  1. Open the Azure Portal and go to Virtual Machines.
  2. Choose the Virtual Machine you wish to edit.
  3. Under Settings, select Extensions + applications.
  4. Select the extension and choose Uninstall.

In Terraform -

  1. In the azurerm_linux_virtual_machine resource, set allow_extension_operations to false.
  2. Set provision_vm_agent to false.

References:
https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/overview
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/linux_virtual_machine#allow_extension_operations

Policy Details

Rule Reference ID: AC_AZURE_0310
CSP: Azure
Remediation Available: Yes
Resource Category: Compute
Resource Type: Virtual Machine

Frameworks