Blog Post

Linux and Open Source Blog
3 MIN READ

From Compliance to Auto-Remediation: Azure's Latest Linux Security Innovations

pallakatos's avatar
pallakatos
Icon for Microsoft rankMicrosoft
Nov 19, 2024

We are pleased to announce that the Azure security baseline through Azure Policy and Machine Configuration for Linux has moved to public preview, and we are expanding the capabilities with built-in a...
Updated Nov 18, 2024
Version 1.0
almalinux
azure linux
centos
debian
linux on azure
microsoft ignite 2024
oracle linux
red hat
security
BartDecker's avatar
BartDecker
Copper Contributor
Dec 18, 2024

Nice feature......some questions though....

  1. Is there a mapping available for each operating system that shows the coverage between the CIS Compute Benchmark for that OS and the implementation here?
  2. Why isn’t the policy explicitly "branded" as CIS, aside from referencing CIS in the individual controls? Many companies aim for "CIS Compliance" but face challenges in bridging the gap between the "Azure Security Benchmark" and the actual CIS Benchmark they need to report against. This mapping seems crucial for clarity and alignment.

 

  • pallakatos's avatar
    pallakatos
    Icon for Microsoft rankMicrosoft
    Jan 07, 2025

    Hi Bart,

    Appreciate your feedback and questions. This is only the first iteration of a lots of new things and your question are raising good points - let me try to address them.

    1. This particular policy is an Azure branded policy which has been uplifted as a first step to include the references to the CIS and provide better and richer outcomes when it comes to reporting state of compliance. (It has around 63% coverage if the distro independent benchmark.)
    2. I've hinted in the blog that we are working on a fully aligned set of CIS benchmarks coming soon which will be branded as CIS and will have a fully aligned content to the standards per distro. As you highlighted the companies are aimed to be compliant against CIS and not against an Azure interpretation of CIS. Stay tuned on the upcoming announcements in this space because exactly this is what we are aiming to resolve and help customers with.

    I hope I've managed to answer your questions - if you have additional questions please do not hesitate to contact me.

    Pal

    • BartDecker's avatar
      BartDecker
      Copper Contributor
      Jan 20, 2025

      Thanks for the reply Very much looking forward to this.

      Do you know of any demo sessions, private preview sessions or other sessions under NDA which can be attend by Microsoft Partners?

      • pallakatos's avatar
        pallakatos
        Icon for Microsoft rankMicrosoft
        Jan 28, 2025

        Fill out the sign-up form linked at the bottom of the blog, and you will not miss the news for sure :)