Azure Microsoft Defender for Cloud is set to Off for Storage misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_84
Category - Subcategory	Monitoring - Alerting And Notifications
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	c81c7c29-7d43-4e01-b830-8ba088f34a29

Impact

Azure Defender is a cloud workload protection service that utilizes and agent-based deployment to analyze signals from Azure network fabric and the service control plane, to detect threats across all Azure resources. It can also analyze non-Azure resources, utilizing Azure Arc, including those on-premises and in both AWS and GCP (once they've been onboarded). Azure Defender for Storage detects unusual and potentially harmful attempts to access or exploit storage accounts.

How to Fix

Resource: azurerm_security_center_subscription_pricing

• Arguments: resource_type - (Required) The resource type this setting affects.

Ensure that StorageAccounts is declared to pass this check. [source,go]

resource "azurerm_security_center_subscription_pricing" "example" { tier = "Standard" resource_type = "AppServices,ContainerRegistry,KeyVaults,KubernetesService,SqlServers,SqlServerVirtualMachines,StorageAccounts,VirtualMachines,ARM,DNS" }