이 제품은 선택한 Datadog 사이트에서 지원되지 않습니다. ().
이 페이지는 아직 한국어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Metadata

Id: terraform-azure-security-center-pricing-tier-is-not-standard

Provider: Azure

Platform: Terraform

Severity: Medium

Category: Insecure Configurations

Learn More

Description

Selecting the appropriate pricing tier for Azure Security Center is crucial for ensuring comprehensive security monitoring and protection. If the tier attribute in the azurerm_security_center_subscription_pricing resource is set to "Free", as in the following configuration, only limited security features and monitoring capabilities are enabled, leaving the environment more vulnerable to threats:

resource "azurerm_security_center_subscription_pricing" "example" {
   tier = "Free"
}

To enhance security coverage, upgrade to the "Standard" tier, as shown below. This enables advanced features such as threat detection and automated response, significantly reducing the risk of undetected attacks and data breaches:

resource "azurerm_security_center_subscription_pricing" "example" {
   tier = "Standard"
}

Compliant Code Examples

resource "azurerm_security_center_subscription_pricing" "negative1" {
   tier = "Standard"
}

Non-Compliant Code Examples

resource "azurerm_security_center_subscription_pricing" "positive1" {
   tier = "Free"
}