Remove Deprecated User Accounts across multiple Subscriptions

Published May 03 2021 09:04 AM 2,139 Views
Microsoft

Deprecated accounts are the accounts that were once deployed to a subscription for some trial/pilot initiative or some other purpose and are not required anymore. The user accounts that have been blocked from signing in should be removed from subscriptions. These accounts can be targets for attackers finding ways to access your data without being noticed.
The Azure Security Center recommends identifying those accounts and removing any role assignments on them from the subscription, however, it could be tedious in the case of multiple subscriptions.

 

Pre-Requisite:
 - Az Modules must be installed
 - Service principal created as part of Step 1 must be having owner access to all subscriptions
 
Steps to follow:
Step 1: Create a service principal
Post creation of service principal, please retrieve below values.
  1. Tenant Id
  2. Client Secret
  3. Client Id
Step 2: Create a PowerShell function which will be used in generating authorization token
function Get-apiHeader{
[CmdletBinding()]
Param
(
 [Parameter(Mandatory=$true)]
 [System.String]
 [ValidateNotNullOrEmpty()]
 $TENANTID,
 [Parameter(Mandatory=$true)]
 [System.String]
 [ValidateNotNullOrEmpty()]
 $ClientId,
 [Parameter(Mandatory=$true)]
 [System.String]
 [ValidateNotNullOrEmpty()]
 $PasswordClient,
 [Parameter(Mandatory=$true)]
 [System.String]
 [ValidateNotNullOrEmpty()]
 $resource
)
$tokenresult=Invoke-RestMethod -Uri https://login.microsoftonline.com/$TENANTID/oauth2/token?api-version=1.0 -Method Post -Body @{"grant_type" = "client_credentials"; "resource" = "https://$resource/"; "client_id" = "$ClientId"; "client_secret" = "$PasswordClient" }
$token=$tokenresult.access_token
$Header=@{
  'Authorization'="Bearer $token"
  'Host'="$resource"
  'Content-Type'='application/json'
  }
return $Header
}

 

Step 3: Invoke API to retrieve authorization token using function created in above step
Note: Replace $TenantId, $ClientId and $ClientSecret with value captured in step 1

 

 

$AzureApiheaders = Get-apiHeader -TENANTID $TenantId -ClientId $ClientId -PasswordClient $ClientSecret -resource "management.azure.com"

 

 

 

Step 4: Extracting csv file containing list of all deprecated accounts from Azure Resource Graph

Please referhttps://github.com/MicrosoftDocs/azure-docs/blob/master/articles/governance/resource-graph/first-que...

Azure Resource graph explorer: https://docs.microsoft.com/en-us/azure/governance/resource-graph/overview

Query:

 

 

securityresources
        | where type == "microsoft.security/assessments"
        | extend source = tostring(properties.resourceDetails.Source)
        | extend resourceId =
            trim(" ", tolower(tostring(case(source =~ "azure", properties.resourceDetails.Id,
            extract("^(.+)/providers/Microsoft.Security/assessments/.+$",1,id)))))
        | extend status = trim(" ", tostring(properties.status.code))
        | extend cause = trim(" ", tostring(properties.status.cause))
        | extend assessmentKey = tostring(name)
        | where assessmentKey == "00c6d40b-e990-6acf-d4f3-471e747a27c4"

 

 

 

data.JPG

 

Click on "Download as CSV" and store at location where removal of deprecated account script is present. Rename the file as "deprecatedaccountextract"

 

 

Set-Location $PSScriptRoot
$RootFolder = Split-Path $MyInvocation.MyCommand.Path
$ParameterCSVPath =$RootFolder + "\deprecatedaccountextract.csv"
if(Test-Path -Path $ParameterCSVPath)                                                                          
{ 
$TableData = Import-Csv $ParameterCSVPath
}

foreach($Data in $TableData)
{
  #Get resourceID for specific resource 
  $resourceid=$Data.resourceId
  #Get control results column for specific resource
  $controlresult=$Data.properties
  $newresult=$controlresult | ConvertFrom-Json
  $ObjectIdList=$newresult.AdditionalData.deprecatedAccountsObjectIdList
  $regex="[^a-zA-Z0-9-]"
  $splitres=$ObjectIdList -split(',')
  $deprecatedObjectIds=$splitres -replace $regex
  foreach($objectId in $deprecatedObjectIds)
  {   
    #API to get role assignment details from Azure
    $resourceURL="https://management.azure.com$($resourceid)/providers/microsoft.authorization/roleassignments?api-version=2015-07-01"
    $resourcedetails=(Invoke-RestMethod  -Uri $resourceURL -Headers $AzureApiheaders -Method GET)
    if( $null -ne $resourcedetails )
    {        
     foreach($value in $resourcedetails.value)
     {
      if($value.properties.principalId -eq $objectId)
      {
       $roleassignmentid=$value.name
       $remidiateURL="https://management.azure.com$($resourceid)/providers/microsoft.authorization/roleassignments/$($roleassignmentid)?api-version=2015-07-01"
       Invoke-RestMethod  -Uri $remidiateURL -Headers $AzureApiheaders -Method DELETE
      }
     }
    }
    else
    {
     Write-Output "There are no Role Assignments in the subscription"
    }             
   }
}

 

 

 

References:

https://github.com/Azure/Azure-Security-Center/blob/master/Remediation%20scripts/Remove%20deprecated...

https://docs.microsoft.com/en-us/azure/security-center/policy-reference#:~:text=Deprecated%20account....

 

 

%3CLINGO-SUB%20id%3D%22lingo-sub-2275836%22%20slang%3D%22en-US%22%3ERemove%20Deprecated%20User%20Accounts%20across%20multiple%20Subscriptions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2275836%22%20slang%3D%22en-US%22%3E%3CP%3EDeprecated%20accounts%20are%20the%20accounts%20that%20were%20once%20deployed%20to%20a%20subscription%20for%20some%20trial%2Fpilot%20initiative%20or%20some%20other%20purpose%20and%20are%20not%20required%20anymore.%20The%20user%20accounts%20that%20have%20been%20blocked%20from%20signing%20in%20should%20be%20removed%20from%20subscriptions.%20These%20accounts%20can%20be%20targets%20for%20attackers%20finding%20ways%20to%20access%20your%20data%20without%20being%20noticed.%3CBR%20%2F%3EThe%20Azure%20Security%20Center%20recommends%20identifying%20those%20accounts%20and%20removing%20any%20role%20assignments%20on%20them%20from%20the%20subscription%2C%20however%2C%20it%20could%20be%20tedious%20in%20the%20case%20of%20multiple%20subscriptions.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CDIV%3E%3CSTRONG%3EPre-Requisite%3A%3C%2FSTRONG%3E%3C%2FDIV%3E%0A%3CDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E-%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3BAz%26nbsp%3BModules%26nbsp%3Bmust%26nbsp%3Bbe%26nbsp%3Binstalled%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3CDIV%3E%3CSPAN%3E%26nbsp%3B-%20Service%20principal%20created%20as%20part%20of%20Step%201%20must%20be%20having%20owner%20access%20to%20all%20subscriptions%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CDIV%3E%3CSTRONG%3ESteps%20to%20follow%3A%3C%2FSTRONG%3E%3C%2FDIV%3E%0A%3CDIV%3E%0A%3CDIV%3E%3CSPAN%3E%3CSTRONG%3EStep%26nbsp%3B1%3C%2FSTRONG%3E%3A%26nbsp%3BCreate%26nbsp%3Ba%26nbsp%3Bservice%26nbsp%3Bprincipal%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3CDIV%3E%3CSTRONG%3EPlease%20refer%3A%3C%2FSTRONG%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fdevelop%2Fhowto-create-service-principal-portal%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fdevelop%2Fhowto-create-service-principal-portal%3C%2FA%3E%3C%2FDIV%3E%0A%3CDIV%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fazure%2Fcreate-azure-service-principal-azureps%3Fview%3Dazps-5.7.0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fazure%2Fcreate-azure-service-principal-azureps%3Fview%3Dazps-5.7.0%3C%2FA%3E%3C%2FDIV%3E%0A%3CDIV%3EPost%20creation%20of%20service%20principal%2C%20please%20retrieve%20below%20values.%3C%2FDIV%3E%0A%3COL%3E%0A%3CLI%3ETenant%20Id%3C%2FLI%3E%0A%3CLI%3EClient%20Secret%3C%2FLI%3E%0A%3CLI%3EClient%20Id%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CDIV%3E%0A%3CDIV%3E%3CSPAN%3E%3CSTRONG%3EStep%26nbsp%3B2%3C%2FSTRONG%3E%3A%26nbsp%3BCreate%26nbsp%3Ba%20PowerShell%26nbsp%3Bfunction%26nbsp%3Bwhich%26nbsp%3Bwill%26nbsp%3Bbe%26nbsp%3Bused%26nbsp%3Bin%26nbsp%3Bgenerating%26nbsp%3Bauthorization%26nbsp%3Btoken%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3CDIV%3E%3CPRE%20class%3D%22lia-code-sample%20language-powershell%22%3E%3CCODE%3Efunction%20Get-apiHeader%7B%0A%5BCmdletBinding()%5D%0AParam%0A(%0A%20%5BParameter(Mandatory%3D%24true)%5D%0A%20%5BSystem.String%5D%0A%20%5BValidateNotNullOrEmpty()%5D%0A%20%24TENANTID%2C%0A%20%5BParameter(Mandatory%3D%24true)%5D%0A%20%5BSystem.String%5D%0A%20%5BValidateNotNullOrEmpty()%5D%0A%20%24ClientId%2C%0A%20%5BParameter(Mandatory%3D%24true)%5D%0A%20%5BSystem.String%5D%0A%20%5BValidateNotNullOrEmpty()%5D%0A%20%24PasswordClient%2C%0A%20%5BParameter(Mandatory%3D%24true)%5D%0A%20%5BSystem.String%5D%0A%20%5BValidateNotNullOrEmpty()%5D%0A%20%24resource%0A)%0A%24tokenresult%3DInvoke-RestMethod%20-Uri%20https%3A%2F%2Flogin.microsoftonline.com%2F%24TENANTID%2Foauth2%2Ftoken%3Fapi-version%3D1.0%20-Method%20Post%20-Body%20%40%7B%22grant_type%22%20%3D%20%22client_credentials%22%3B%20%22resource%22%20%3D%20%22https%3A%2F%2F%24resource%2F%22%3B%20%22client_id%22%20%3D%20%22%24ClientId%22%3B%20%22client_secret%22%20%3D%20%22%24PasswordClient%22%20%7D%0A%24token%3D%24tokenresult.access_token%0A%24Header%3D%40%7B%0A%20%20'Authorization'%3D%22Bearer%20%24token%22%0A%20%20'Host'%3D%22%24resource%22%0A%20%20'Content-Type'%3D'application%2Fjson'%0A%20%20%7D%0Areturn%20%24Header%0A%7D%3C%2FCODE%3E%3C%2FPRE%3E%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CDIV%3E%3CSPAN%3E%3CSTRONG%3EStep%26nbsp%3B3%3C%2FSTRONG%3E%3A%26nbsp%3BInvoke%26nbsp%3BAPI%20to%20retrieve%26nbsp%3Bauthorization%26nbsp%3Btoken%20using%20function%20created%20in%20above%20step%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3CDIV%3E%0A%3CDIV%3E%0A%3CDIV%3E%3CEM%3ENote%3A%26nbsp%3BReplace%20%24TenantId%2C%20%24ClientId%26nbsp%3Band%20%24ClientSecret%20with%20value%26nbsp%3Bcaptured%26nbsp%3Bin%26nbsp%3Bstep%26nbsp%3B1%3C%2FEM%3E%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-applescript%22%3E%3CCODE%3E%24AzureApiheaders%20%3D%20Get-apiHeader%20-TENANTID%20%24TenantId%20-ClientId%20%24ClientId%20-PasswordClient%20%24ClientSecret%20-resource%20%22management.azure.com%22%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EStep%204%3C%2FSTRONG%3E%3A%20Extracting%20csv%20file%20containing%20list%20of%20all%20deprecated%20accounts%20from%20Azure%20Resource%20Graph%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EPlease%20refer%3C%2FSTRONG%3E%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fazure-docs%2Fblob%2Fmaster%2Farticles%2Fgovernance%2Fresource-graph%2Ffirst-query-portal.md%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fazure-docs%2Fblob%2Fmaster%2Farticles%2Fgovernance%2Fresource-graph%2Ffirst-query-portal.md%3C%2FA%3E%3C%2FP%3E%0A%3CP%3EAzure%20Resource%20graph%20explorer%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fgovernance%2Fresource-graph%2Foverview%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fgovernance%2Fresource-graph%2Foverview%3C%2FA%3E%3C%2FP%3E%0A%3CP%3EQuery%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-powershell%22%3E%3CCODE%3Esecurityresources%0A%20%20%20%20%20%20%20%20%7C%20where%20type%20%3D%3D%20%22microsoft.security%2Fassessments%22%0A%20%20%20%20%20%20%20%20%7C%20extend%20source%20%3D%20tostring(properties.resourceDetails.Source)%0A%20%20%20%20%20%20%20%20%7C%20extend%20resourceId%20%3D%0A%20%20%20%20%20%20%20%20%20%20%20%20trim(%22%20%22%2C%20tolower(tostring(case(source%20%3D~%20%22azure%22%2C%20properties.resourceDetails.Id%2C%0A%20%20%20%20%20%20%20%20%20%20%20%20extract(%22%5E(.%2B)%2Fproviders%2FMicrosoft.Security%2Fassessments%2F.%2B%24%22%2C1%2Cid)))))%0A%20%20%20%20%20%20%20%20%7C%20extend%20status%20%3D%20trim(%22%20%22%2C%20tostring(properties.status.code))%0A%20%20%20%20%20%20%20%20%7C%20extend%20cause%20%3D%20trim(%22%20%22%2C%20tostring(properties.status.cause))%0A%20%20%20%20%20%20%20%20%7C%20extend%20assessmentKey%20%3D%20tostring(name)%0A%20%20%20%20%20%20%20%20%7C%20where%20assessmentKey%20%3D%3D%20%2200c6d40b-e990-6acf-d4f3-471e747a27c4%22%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22data.JPG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F274227i556DAEA20E372C1C%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22data.JPG%22%20alt%3D%22data.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EClick%20on%20%22Download%20as%20CSV%22%20and%20store%20at%20location%20where%20removal%20of%20deprecated%20account%20script%20is%20present.%20Rename%20the%20file%20as%20%22%3CEM%3Edeprecatedaccountextract%3C%2FEM%3E%22%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-powershell%22%3E%3CCODE%3ESet-Location%20%24PSScriptRoot%0A%24RootFolder%20%3D%20Split-Path%20%24MyInvocation.MyCommand.Path%0A%24ParameterCSVPath%20%3D%24RootFolder%20%2B%20%22%5Cdeprecatedaccountextract.csv%22%0Aif(Test-Path%20-Path%20%24ParameterCSVPath)%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%0A%7B%20%0A%24TableData%20%3D%20Import-Csv%20%24ParameterCSVPath%0A%7D%0A%0Aforeach(%24Data%20in%20%24TableData)%0A%7B%0A%20%20%23Get%20resourceID%20for%20specific%20resource%20%0A%20%20%24resourceid%3D%24Data.resourceId%0A%20%20%23Get%20control%20results%20column%20for%20specific%20resource%0A%20%20%24controlresult%3D%24Data.properties%0A%20%20%24newresult%3D%24controlresult%20%7C%20ConvertFrom-Json%0A%20%20%24ObjectIdList%3D%24newresult.AdditionalData.deprecatedAccountsObjectIdList%0A%20%20%24regex%3D%22%5B%5Ea-zA-Z0-9-%5D%22%0A%20%20%24splitres%3D%24ObjectIdList%20-split('%2C')%0A%20%20%24deprecatedObjectIds%3D%24splitres%20-replace%20%24regex%0A%20%20foreach(%24objectId%20in%20%24deprecatedObjectIds)%0A%20%20%7B%20%20%20%0A%20%20%20%20%23API%20to%20get%20role%20assignment%20details%20from%20Azure%0A%20%20%20%20%24resourceURL%3D%22https%3A%2F%2Fmanagement.azure.com%24(%24resourceid)%2Fproviders%2Fmicrosoft.authorization%2Froleassignments%3Fapi-version%3D2015-07-01%22%0A%20%20%20%20%24resourcedetails%3D(Invoke-RestMethod%20%20-Uri%20%24resourceURL%20-Headers%20%24AzureApiheaders%20-Method%20GET)%0A%20%20%20%20if(%20%24null%20-ne%20%24resourcedetails%20)%0A%20%20%20%20%7B%20%20%20%20%20%20%20%20%0A%20%20%20%20%20foreach(%24value%20in%20%24resourcedetails.value)%0A%20%20%20%20%20%7B%0A%20%20%20%20%20%20if(%24value.properties.principalId%20-eq%20%24objectId)%0A%20%20%20%20%20%20%7B%0A%20%20%20%20%20%20%20%24roleassignmentid%3D%24value.name%0A%20%20%20%20%20%20%20%24remidiateURL%3D%22https%3A%2F%2Fmanagement.azure.com%24(%24resourceid)%2Fproviders%2Fmicrosoft.authorization%2Froleassignments%2F%24(%24roleassignmentid)%3Fapi-version%3D2015-07-01%22%0A%20%20%20%20%20%20%20Invoke-RestMethod%20%20-Uri%20%24remidiateURL%20-Headers%20%24AzureApiheaders%20-Method%20DELETE%0A%20%20%20%20%20%20%7D%0A%20%20%20%20%20%7D%0A%20%20%20%20%7D%0A%20%20%20%20else%0A%20%20%20%20%7B%0A%20%20%20%20%20Write-Output%20%22There%20are%20no%20Role%20Assignments%20in%20the%20subscription%22%0A%20%20%20%20%7D%20%20%20%20%20%20%20%20%20%20%20%20%20%0A%20%20%20%7D%0A%7D%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EReferences%3A%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FAzure%2FAzure-Security-Center%2Fblob%2Fmaster%2FRemediation%2520scripts%2FRemove%2520deprecated%2520accounts%2520from%2520subscriptions%2FPowerShell%2FRemove-deprecated-accounts-from-subscriptions.ps1%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2FAzure%2FAzure-Security-Center%2Fblob%2Fmaster%2FRemediation%2520scripts%2FRemove%2520deprecated%2520accounts%2520from%2520subscriptions%2FPowerShell%2FRemove-deprecated-accounts-from-subscriptions.ps1%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsecurity-center%2Fpolicy-reference%23%3A~%3Atext%3DDeprecated%2520accounts%2520are%2520accounts%2520that%2520have%2520been%2520blocked%2520from%2520signing%2520in.%26amp%3Btext%3DVirtual%2520machines%2520without%2520an%2520enabled%2CAzure%2520Security%2520Center%2520as%2520recommendations%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsecurity-center%2Fpolicy-reference%23%3A~%3Atext%3DDeprecated%2520accounts%2520are%2520accounts%2520that%2520have%2520been%2520blocked%2520from%2520signing%2520in.%26amp%3Btext%3DVirtual%2520machines%2520without%2520an%2520enabled%2CAzure%2520Security%2520Center%2520as%2520recommendations%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Version history
Last update:
‎May 03 2021 09:05 AM
Updated by: