> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/appsec-rules/iac-security/monitoring.md). # Monitoring | Rule Name | AppSec Rule ID | Severity | | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------ | -------- | | [Alibaba Cloud Kubernetes node pools are not set to auto repair misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-ali-31.md) | APPSEC\_ALI\_31 | LOW | | [Alibaba RDS instance has log\_connections disabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-ali-37.md) | APPSEC\_ALI\_37 | LOW | | [AWS ECS cluster with container insights feature disabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-aws-65.md) | APPSEC\_AWS\_65 | LOW | | [AWS Amazon RDS instances Enhanced Monitoring is disabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-aws-118.md) | APPSEC\_AWS\_118 | LOW | | [AWS CloudFormation stack configured without SNS topic misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-aws-124.md) | APPSEC\_AWS\_124 | LOW | | [AWS EC2 instance detailed monitoring disabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-aws-126.md) | APPSEC\_AWS\_126 | MEDIUM | | [AWS WAF does not have associated rules misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-aws-175.md) | APPSEC\_AWS\_175 | LOW | | [AWS GuardDuty detector is not enabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-aws-238.md) | APPSEC\_AWS\_238 | LOW | | [Elastic Beanstalk environments do not have enhanced health reporting enabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-aws-312.md) | APPSEC\_AWS\_312 | HIGH | | [CloudWatch alarm actions are not enabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-aws-319.md) | APPSEC\_AWS\_319 | MEDIUM | | [EKS clusters are not running on a supported Kubernetes version misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-aws-339.md) | APPSEC\_AWS\_339 | HIGH | | [AWS resources that support tags do not have Tags misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-aws-custom-1.md) | APPSEC\_AWS\_CUSTOM\_1 | LOW | | [Azure AKS cluster monitoring not enabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-4.md) | APPSEC\_AZURE\_4 | LOW | | [Azure Microsoft Defender for Cloud Defender plans is set to Off misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-19.md) | APPSEC\_AZURE\_19 | LOW | | [Azure Microsoft Defender for Cloud security contact phone number is not set misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-20.md) | APPSEC\_AZURE\_20 | LOW | | [Azure Microsoft Defender for Cloud security alert email notification is not set misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-21.md) | APPSEC\_AZURE\_21 | LOW | | [Azure Microsoft Defender for Cloud email notification for subscription owner is not set misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-22.md) | APPSEC\_AZURE\_22 | LOW | | [Azure SQL Server threat detection alerts are not enabled for all threat types misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-25.md) | APPSEC\_AZURE\_25 | HIGH | | [Azure SQL Databases with disabled Email service and co-administrators for Threat Detection misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-27.md) | APPSEC\_AZURE\_27 | LOW | | [Azure Microsoft Defender for Cloud is set to Off for Servers misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-55.md) | APPSEC\_AZURE\_55 | LOW | | [Azure Microsoft Defender for Cloud is set to Off for App Service misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-61.md) | APPSEC\_AZURE\_61 | LOW | | [Azure Microsoft Defender for Cloud is set to Off for Azure SQL Databases misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-69.md) | APPSEC\_AZURE\_69 | LOW | | [Azure Microsoft Defender for Cloud is set to Off for SQL servers on machines misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-79.md) | APPSEC\_AZURE\_79 | LOW | | [Azure Microsoft Defender for Cloud is set to Off for Storage misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-84.md) | APPSEC\_AZURE\_84 | LOW | | [Azure Security Center Defender set to Off for Kubernetes misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-85.md) | APPSEC\_AZURE\_85 | HIGH | | [Azure Microsoft Defender for Cloud is set to Off for Container Registries misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-86.md) | APPSEC\_AZURE\_86 | HIGH | | [Azure Microsoft Defender for Cloud is set to Off for Key Vault misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-87.md) | APPSEC\_AZURE\_87 | LOW | | [My SQL server does not enable Threat Detection policy misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-127.md) | APPSEC\_AZURE\_127 | LOW | | [PostgreSQL server does not enable Threat Detection policy misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-128.md) | APPSEC\_AZURE\_128 | LOW | | [Azure Microsoft Defender for Cloud security alert email notifications is not set misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-131.md) | APPSEC\_AZURE\_131 | LOW | | [Vulnerability Scanning not enabled for Azure Container Registry misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-163.md) | APPSEC\_AZURE\_163 | MEDIUM | | [Azure App Service Health Check Missing misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-213.md) | APPSEC\_AZURE\_213 | LOW | | [Azure Microsoft Defender for Cloud set to Off for Resource Manager misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-234.md) | APPSEC\_AZURE\_234 | MEDIUM | | [Azure resources that support tags do not have tags misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-azure-custom-1.md) | APPSEC\_AZURE\_CUSTOM\_1 | LOW | | [GCP Kubernetes Engine Clusters have Cloud Monitoring disabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-gcp-8.md) | APPSEC\_GCP\_8 | LOW | | [GCP Kubernetes cluster node auto-repair configuration disabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-gcp-9.md) | APPSEC\_GCP\_9 | LOW | | [GCP Kubernetes cluster node auto-upgrade configuration disabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-gcp-10.md) | APPSEC\_GCP\_10 | LOW | | [GCP Kubernetes Engine Clusters without any label information misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-gcp-21.md) | APPSEC\_GCP\_21 | LOW | | [The GKE metadata server is disabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-gcp-69.md) | APPSEC\_GCP\_69 | LOW | | [GCP Kubernetes Engine cluster not using Release Channel for version management misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-gcp-70.md) | APPSEC\_GCP\_70 | LOW | | [GCP Kubernetes cluster shielded GKE node with integrity monitoring disabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-gcp-72.md) | APPSEC\_GCP\_72 | LOW | | [GCP Cloud Armor policy not configured with cve-canary rule misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-gcp-73.md) | APPSEC\_GCP\_73 | MEDIUM | | [GCP resources that support labels do not have labels misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-gcp-custom-1.md) | APPSEC\_GCP\_CUSTOM\_1 | LOW | | [GitHub Repository defined in Terraform doesn't have vulnerability alerts enabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-git-3.md) | APPSEC\_GIT\_3 | LOW | | [Liveness probe is not configured misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-k8s-8.md) | APPSEC\_K8S\_8 | LOW | | [Readiness probe is not configured misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-k8s-9.md) | APPSEC\_K8S\_9 | LOW | | [The --profiling argument is not set to false for API server misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-k8s-90.md) | APPSEC\_K8S\_90 | LOW | | [The --request-timeout argument is not set appropriately misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-k8s-95.md) | APPSEC\_K8S\_95 | MEDIUM | | [The --profiling argument for controller managers is not set to False misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-k8s-107.md) | APPSEC\_K8S\_107 | MEDIUM | | [The --profiling argument is not set to False for scheduler misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-k8s-114.md) | APPSEC\_K8S\_114 | LOW | | [The --event-qps argument is not set to a level that ensures appropriate event capture misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-k8s-147.md) | APPSEC\_K8S\_147 | LOW | | [OCI Compute Instance has monitoring disabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-oci-6.md) | APPSEC\_OCI\_6 | LOW | | [Terraform module sources do not use a git url with a commit hash revision misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-tf-1.md) | APPSEC\_TF\_1 | MEDIUM | | [Terraform module sources do not use a git url with a tag or commit hash revision misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec-tf-2.md) | APPSEC\_TF\_2 | HIGH | | [GuardDuty is not enabled to specific org/region misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec2-aws-3.md) | APPSEC2\_AWS\_3 | LOW | | [AWS CloudFront attached WAFv2 WebACL is not configured with AMR for Log4j Vulnerability misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec2-aws-47.md) | APPSEC2\_AWS\_47 | MEDIUM | | [AWS RDS instance with copy tags to snapshots disabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec2-aws-60.md) | APPSEC2\_AWS\_60 | LOW | | [Azure SQL Server ADS Vulnerability Assessment is disabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec2-azure-2.md) | APPSEC2\_AZURE\_2 | LOW | | [Azure SQL Server ADS Vulnerability Assessment (VA) Periodic recurring scans is disabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec2-azure-3.md) | APPSEC2\_AZURE\_3 | LOW | | [Azure SQL Server ADS Vulnerability Assessment (VA) 'Send scan reports to' is not configured misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec2-azure-4.md) | APPSEC2\_AZURE\_4 | LOW | | [Azure SQL Server ADS Vulnerability Assessment (VA) 'Also send email notifications to admins and subscription owners' is disabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec2-azure-5.md) | APPSEC2\_AZURE\_5 | LOW | | [Azure SQL server Defender setting is set to Off misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec2-azure-13.md) | APPSEC2\_AZURE\_13 | LOW | | [GCP GCR Container Vulnerability Scanning is disabled misconfiguration detected in code](/appsec-rules/iac-security/monitoring/appsec2-gcp-11.md) | APPSEC2\_GCP\_11 | LOW | --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://cortex-docs.paloaltonetworks.com/appsec-rules/iac-security/monitoring.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.