SOLVED

New resources appear in the Microsoft Defender for Cloud recommendations

Copper Contributor

Hello All,

 

I have been working on exempting some resources from DFC recommendations, however recommendations which i have already completed appear to have new "unhealthy" resources in them which were not present before. Do you know why is that. My understanding is that after initial evaluation of the env is made all healthy and unhealthy and not applicable resources should appear within a certain recommendation. In my case however i can say that there were no newly added or modified resources. Everything has been the same. To give you an example - I had to exempt 1 unhealthy key vault (out of 13) as per the recommendation. After 2 weeks 5 more appeared as unhealthy. Thank you!

4 Replies
Hi @NNedelchev,

The 5 more resources that appear as unhealthy, are they new resources or already exempted resources? If they are already exempted resources, probably you must check if you have set an expiration date while exempting them.
best response confirmed by NNedelchev (Copper Contributor)
Solution

@NNedelchev It could be that there has been a change to Azure police or a related service that causes a revaluation of resources. The health re-evaluation could then show a health status change. 

No, they were not already exempted
Yes, makes sense, that's what i also thought. Anyway since this case i haven't had any new resources appear. Thanks for your input guys
1 best response

Accepted Solutions
best response confirmed by NNedelchev (Copper Contributor)
Solution

@NNedelchev It could be that there has been a change to Azure police or a related service that causes a revaluation of resources. The health re-evaluation could then show a health status change. 

View solution in original post