Azure Microsoft Defender for Cloud security alert email notifications is not set

Description

Azure Security Center recommends adding one valid security contact email address for each Microsoft Azure subscription. Security Center emails designated administrators using the defined security contact in case the Microsoft security team find Azure cloud resources are compromised.

Code Example

resource "azurerm_security_center_contact" "example" {
+  email = "[email protected]"
        ...
}

Remediation

Terraform

• Resource: azurerm_security_center_contact
• Arguments: email - (Required) The email of the Security Center Contact.

Rule Details

Field	Value
ID	IAC-0638
Severity	INFO
IaC Type	Terraform
Frameworks	ARM, Terraform, Bicep, TerraformPlan
Checkov ID	CKV_AZURE_131

References

• Checkov Rule

---