Policy: Azure > CIS v1 > 7 Virtual Machines > 7.04 Ensure that only approved extensions are installed (Not Scored) > Attestation
By setting this policy, you attest that you have manually verified that it complies with the relevant section of the CIS Benchmark.
Azure Console
- Go to Virtual machines
- For each virtual machine, go to Settings
- Click on Extensions
- Ensure that the listed extensions are approved for use.
Azure Command Line Interface 2.0 Use the below command to list the extensions attached to a VM, and ensure the listed extensions are approved for use. az vm extension list --vm-name --resource-group -- query [*].name
Once verified, enter the date that this attestation expires. Note that the date can not be further in the future than is specified in Azure > CIS v1 > Maximum Attestation Duration. Set to a blank value to clear the attestation.
Resource Types
This policy targets the following resource types:
Primary Policy
This policy is used with the following primary policy:
Controls
- Azure > CIS v1
- Azure > CIS v1 > 7 Virtual Machines > 7.04 Ensure that only approved extensions are installed (Not Scored)
- Azure > CIS v1 > 7 Virtual Machines
Policy Specification
Schema Type |
|
---|
Category
In Your Workspace
Developers
- tmod:@turbot/cis#/control/categories/v070201
- tmod:@turbot/azure-cisv1#/policy/types/r0704Attestation
- turbot graphql policy-type --id "tmod:@turbot/azure-cisv1#/policy/types/r0704Attestation"
- turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/azure-cisv1#/policy/types/r0704Attestation"
Get Policy TypeGet Policy Settings
Category URI
Policy Type URI
GraphQL
CLI