Azure_SecurityCenter_20

Ensure that Azure Resource Group has resource lock enabled

Description

Resource Manager Locks allow administrators to lock down Azure resources and prevent deletion or changing of resources. You can set the lock level to CanNotDelete or ReadOnly. In the portal, the locks are called Delete and Read-only respectively. It is recommended to have locks enabled to prevent accidental or malicious change or deletion.

Remediation

1. Sign in to the AWS Management Console.

2. Navigate to the ‘Resource groups.

3. For each resource group you want to lock, Select ‘Locks’ and click ‘Add’.

4. Select the security group that you want to examine.

5. Specify the lock name and level and save your changes

Service

Security Center

Severity

Low

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!