Policy: Azure > Security Center > Security Center > CMDB

Configure whether to record and synchronize details for Azure Security Center security center(s) into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

Note that if CMDB is set to Skip for a resource, then it will not be added to the CMDB, and no controls that target it will run.

Targets

This policy targets the following resource types:

Azure > Subscription

Controls

Setting this policy configures these controls:

Policy Specification

Schema Type	`string`
Default	`Enforce: Enabled if Security provider is Registered`
Valid Values [YAML]	`Skip` `Enforce: Enabled` `Enforce: Enabled if Security provider is Registered`
Examples [YAML]	`Skip`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/cmdb

Policy Type URI

tmod:@turbot/azure-securitycenter#/policy/types/securityCenterCmdb

GraphQL

query policyType(id: "tmod:@turbot/azure-securitycenter#/policy/types/securityCenterCmdb") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/azure-securitycenter#/policy/types/securityCenterCmdb'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/azure-securitycenter#/policy/types/securityCenterCmdb'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/azure-securitycenter#/policy/types/securityCenterCmdb"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/azure-securitycenter#/policy/types/securityCenterCmdb"