Ensure that the latest OS patches for Azure Virtual Machine

MEDIUM

Description

Azure Virtual Machine does not enable auto OS updates, this may leave them vulnerable.

Remediation

In Azure Console -

  1. Open the Azure Portal and go to Virtual Machines.
  2. Choose the Virtual Machine you wish to edit.
  3. Under Operations, select Updates.
  4. Select the Update settings button and configure as needed.

In Terraform -
Deprecated in favor of azurerm_linux_virtual_machine and azurerm_windows_virtual_machine:

  1. In the azurerm_virtual_machine resource, set enable_automatic_upgrades to true.

References:
https://learn.microsoft.com/en-us/azure/virtual-machines
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/virtual_machine

Policy Details

Rule Reference ID: AC_AZURE_0364
CSP: Azure
Remediation Available: Yes
Resource Category: Compute
Resource Type: Virtual Machine

Frameworks