💼 8 Virtual Machines

Description

This section covers security recommendations to follow for the configuration of Virtual Machines on an Azure subscription.

Section	Sub Sections	Internal Rules	Policies	Flags
💼 8.1 Ensure an Azure Bastion Host Exists (Automated)			1
💼 8.2 Ensure Virtual Machines are utilizing Managed Disks (Automated)			1
💼 8.3 Ensure that 'OS and Data' disks are encrypted with Customer Managed Key (CMK) (Automated)			1
💼 8.4 Ensure that 'Unattached disks' are encrypted with 'Customer Managed Key' (CMK) (Automated)			1
💼 8.5 Ensure that 'Disk Network Access' is NOT set to 'Enable public access from all networks' (Automated)			1
💼 8.6 Ensure that 'Enable Data Access Authentication Mode' is 'Checked' (Automated)			1
💼 8.7 Ensure that Only Approved Extensions Are Installed (Manual)			1
💼 8.8 Ensure that Endpoint Protection for all Virtual Machines is installed (Manual)			1
💼 8.9 [Legacy] Ensure that VHDs are Encrypted (Manual)			1
💼 8.10 Ensure only MFA enabled identities can access privileged Virtual Machine (Manual)			1
💼 8.11 Ensure Trusted Launch is enabled on Virtual Machines (Automated)			1