Blog Post

Core Infrastructure and Security Blog
7 MIN READ

Azure Policy Recommended Practices

Heinrich_Gantenbein's avatar
Heinrich_Gantenbein
Icon for Microsoft rankMicrosoft
May 04, 2023
Azure Policy has multiple uses including general governance, monitoring setup, security, and compliance. It should not be used to deal with items better handled with role-based access control (RBAC)....
Updated Jul 21, 2023
Version 5.0
HeinrichGantenbein
amityadav's avatar
amityadav
Copper Contributor
May 31, 2023


Hi team,

 

Unable to fix - SQL servers on machines should have vulnerability findings resolved.

 

Policy is showing Notfound for non compliance resources, below is the details, i am not understanding how to debug and fix to make resource complaint.


Compliance details
Resource name:sqlvulnerability
Resource type
:
Microsoft.Compute/virtualMachines
Scope
:
Corp-Development-01/rg-vm-dev-eastus2-01
Parent resource
:
resourcegroups/rg-vm-dev-eastus2-01
Location
:
East US 2
Resource ID
:
/subscriptions/6a0bd5a4-9826-44fa-9023-813f69860137/resourcegroups/rg-vm-dev-eastus2-01/providers/microsoft.compute/virtualmachines/sqlvulnerability
Compliance state
Non-compliant
Last evaluated
5/31/2023, 10:38 AM
Definition version
1.0.0
Initiative version
57.14.0
Reason for non-compliance
No related resources match the effect details in the policy definition. (Error code: AssessmentNotFound)
Existence condition
Type
Microsoft.Security/assessments
Name
f97aa83c-9b63-4f9a-99f6-b22c4398f936