Skip to main content

💼 2.24 Ensure a Custom Role is Assigned Permissions for Administering Resource Locks (Manual)

  • Contextual name: 💼 2.24 Ensure a Custom Role is Assigned Permissions for Administering Resource Locks (Manual)
  • ID: /frameworks/cis-azure-v3.0.0/02/24
  • Located in: 💼 2 Identity

Description​

Resource locking is a powerful protection mechanism that can prevent inadvertent modification/deletion of resources within Azure subscriptions/Resource Groups and is a recommended NIST configuration.

Similar​

  • Sections
    • /frameworks/cis-azure-v2.1.0/01/23
    • /frameworks/cis-azure-v4.0.0/06/24

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 CIS Azure v2.1.0 → 💼 1.23 Ensure a Custom Role is Assigned Permissions for Administering Resource Locks - Level 2 (Manual)1
💼 CIS Azure v4.0.0 → 💼 6.24 Ensure that a custom role is assigned permissions for administering resource locks (Manual)1

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 CIS Azure v2.1.0 → 💼 1.23 Ensure a Custom Role is Assigned Permissions for Administering Resource Locks - Level 2 (Manual)1
💼 CIS Azure v4.0.0 → 💼 6.24 Ensure that a custom role is assigned permissions for administering resource locks (Manual)1

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags

Policies (1)​

PolicyLogic CountFlags
📝 Azure Subscription Resource Lock Administrator Custom Role does not exist 🟢🟢 x3