Policy: Azure > CIS v1 > 7 Virtual Machines

Resource Types

This policy targets the following resource types:

• Azure > Subscription

Primary Policy

This policy is used with the following primary policy:

• Azure > CIS v1

Related Policies

• 7.01 Ensure that 'OS disk' are encrypted (Scored)
• 7.02 Ensure that 'Data disks' are encrypted (Scored)
• 7.03 Ensure that 'Unattached disks' are encrypted (Scored)
• 7.04 Ensure that only approved extensions are installed (Not Scored)
• 7.05 Ensure that the latest OS Patches for all Virtual Machines are applied (Not Scored)
• 7.06 Ensure that the endpoint protection for all Virtual Machines is installed (Not Scored)

Controls

• Azure > CIS v1
• Azure > CIS v1 > 7 Virtual Machines

Policy Specification

string

Skip

Category

• CIS

In Your Workspace

• Policy Settings by Type report

Developers

Category URI

tmod:@turbot/cis#/control/categories/cis

Policy Type URI

tmod:@turbot/azure-cisv1#/policy/types/s07

GraphQL

query policyType(id: "tmod:@turbot/azure-cisv1#/policy/types/s07") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/azure-cisv1#/policy/types/s07'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/azure-cisv1#/policy/types/s07'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/azure-cisv1#/policy/types/s07"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/azure-cisv1#/policy/types/s07"