Ensure boot diagnostics are enabled for Azure Virtual Machine

MEDIUM

Description

Disabled boot diagnostics for Azure Virtual Machine may lead to loss of critical logs.

Remediation

In Azure Console -

  1. Open the Azure Portal and go to Virtual Machines.
  2. Choose the Virtual Machine you wish to edit.
  3. Under Help, choose Boot Diagnostics.
  4. Select Settings and Enable.

In Terraform -
Deprecated in favor of azurerm_linux_virtual_machine and azurerm_windows_virtual_machine:

  1. In the azurerm_virtual_machine resource, set boot_diagnostics.enabled to true.

References:
https://learn.microsoft.com/en-us/azure/virtual-machines
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/virtual_machine

Policy Details

Rule Reference ID: AC_AZURE_0362
CSP: Azure
Remediation Available: Yes
Resource Category: Compute
Resource Type: Virtual Machine

Frameworks