Ensure security contact emails are set

Error: Security contact emails are not set

Bridgecrew Policy ID: BC_AZR_GENERAL_49
Checkov Check ID: CKV_AZURE_131
Severity: MEDIUM

Security contact emails are not set

Description

Azure Security Center recommends adding one valid security contact email address for each Microsoft Azure subscription. Security Center emails designated administrators using the defined security contact in case the Microsoft security team find Azure cloud resources are compromised.

Fix - Buildtime

Terraform

  • Resource: azurerm_security_center_contact
  • Argument: email - (Required) The email of the Security Center Contact.
resource "azurerm_security_center_contact" "example" {
+  email = "[email protected]"
 		...
}