AzPolicyAdvertizer

last sync: 2024-Jul-26 18:17:39 UTC

Hotpatch should be enabled for Windows Server Azure Edition VMs

Azure BuiltIn Policy definition

Source Azure Portal
Display name Hotpatch should be enabled for Windows Server Azure Edition VMs
Id 6d02d2f7-e38b-4bdc-96f3-adc0a8726abc
Version 1.0.0
Details on versioning
Category Automanage
Microsoft Learn
Description Minimize reboots and install updates quickly with hotpatch. Learn more at https://docs.microsoft.com/azure/automanage/automanage-hotpatch
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Default
Audit
Allowed
Audit, Deny, Disabled
RBAC role(s) none
Rule aliases IF (2)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration.patchSettings.enableHotpatching Microsoft.Compute virtualMachines properties.osProfile.windowsConfiguration.patchSettings.enableHotpatching True False
Microsoft.Compute/virtualMachines/storageProfile.imageReference.sku Microsoft.Compute virtualMachines properties.storageProfile.imageReference.sku True True
Rule resource types IF (1)
Microsoft.Compute/virtualMachines
Compliance
The following 2 compliance controls are associated with this Policy definition 'Hotpatch should be enabled for Windows Server Azure Edition VMs' (6d02d2f7-e38b-4bdc-96f3-adc0a8726abc)
Control Domain Control Name MetadataId Category Title Owner Requirements Description Info Policy#
RBI_CSF_Banks_v2016 21.2 RBI_CSF_Banks_v2016_21.2 Metrics Metrics-21.2 n/a Some illustrative metrics include coverage of anti-malware software and their updation percentage, patch latency, extent of user awareness training, vulnerability related metrics, etc 1
RBI_CSF_Banks_v2016 5.2 RBI_CSF_Banks_v2016_5.2 Secure Configuration Secure Configuration-5.2 n/a Periodically evaluate critical device (such as firewall, network switches, security devices, etc.) configurations and patch levels for all systems in the bank???s network including in Data Centres, in third party hosted sites, shared-infrastructure locations. 2
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type
[Preview]: Reserve Bank of India - IT Framework for Banks d0d5578d-cc08-2b22-31e3-f525374f235a Regulatory Compliance Preview BuiltIn
Enforce recommended guardrails for Automation Account Enforce-Guardrails-Automation Automation GA ALZ
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-02-04 18:25:37 add 6d02d2f7-e38b-4bdc-96f3-adc0a8726abc
JSON compare n/a
JSON
api-version=2021-06-01
EPAC