Automatic OS image patching is disabled for Virtual Machine scale sets misconfiguration detected in

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_95
Category - Subcategory	Compute - Unsanctioned Resource Or Type
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

This rule enforces enabling automatic OS image patching on Virtual Machine Scale Sets to always keep Virtual Machines secure by safely applying latest security patches every month.

How to Fix

Resource: azurerm_virtual_machine_scale_set

• Arguments: automatic_os_upgrade [source,go]

---

resource "azurerm_virtual_machine_scale_set" "example" { ...

• automatic_os_upgrade = true ... }

---