💼 7 Virtual Machines

Description

This section covers security recommendations to follow for the configuration of Virtual Machines on an Azure subscription.

Section	Internal Rules	Policies
💼 7.1 Ensure an Azure Bastion Host Exists - Level 2 (Automated)		1
💼 7.2 Ensure Virtual Machines are utilizing Managed Disks - Level 1 (Automated)	1	1
💼 7.3 Ensure that 'OS and Data' disks are encrypted with Customer Managed Key (CMK) - Level 2 (Automated)	1	1
💼 7.4 Ensure that 'Unattached disks' are encrypted with 'Customer Managed Key' (CMK) - Level 2 (Automated)	1	1
💼 7.5 Ensure that Only Approved Extensions Are Installed - Level 1 (Manual)		1
💼 7.6 Ensure that Endpoint Protection for all Virtual Machines is installed - Level 2 (Manual)		1
💼 7.7 [Legacy] Ensure that VHDs are Encrypted - Level 2 (Manual)		1
💼 7.8 Ensure only MFA enabled identities can access privileged Virtual Machine - Level 2 (Automated)		1
💼 7.9 Ensure Trusted Launch is enabled on Virtual Machines - Level 1 (Automated)		1