Enable Instance Termination Notifications For Virtual Machine Scale Sets
More Info:
Ensure that your Microsoft Azure virtual machine scale sets are configured to receive instance termination notifications through the Azure Metadata service and have a predefined delay timeout configured for the “Terminate” operation (event). The termination notifications are delivered through Scheduled Events, an Azure Metadata feature which sends termination notifications, and can also be used to delay impactful operations such as reboots and redeployments. The delay associated with the “Terminate” event will depend on the delay limit specified in the VM scale set model configuration.Risk Level
MediumAddress
SecurityCompliance Standards
CBPTriage and Remediation
Remediation
Using Console
Using Console
Sure, Here are the step by step instructions to remediate the misconfiguration “Enable Instance Termination Notifications For Virtual Machine Scale Sets” in AZURE using the AZURE console:
- Open the AZURE portal and log in to your account.
- Navigate to the Virtual Machine Scale Sets blade.
- Select the Virtual Machine Scale Set for which you want to enable the instance termination notifications.
- In the Virtual Machine Scale Set blade, click on the “Auto Scale” option from the left-hand side menu.
- In the “Auto Scale” blade, click on the “Notifications” tab.
- In the “Notifications” tab, click on the “Add notification” button.
- In the “Add notification” blade, select “Email” as the notification type.
- Enter the email address of the recipient(s) who will receive the notification in the “Email addresses” field.
- In the “Email subject” field, enter a subject line for the notification email.
- In the “Email body” field, enter the message you want to include in the notification email.
- Click on the “OK” button to save the notification settings.
Using CLI
Using CLI
To remediate the misconfiguration “Enable Instance Termination Notifications For Virtual Machine Scale Sets” in Azure using Azure CLI, you can follow the below steps:Step 1: Open the Azure CLI command prompt or terminal.Step 2: Run the following command to enable the instance termination notifications for virtual machine scale sets:Note: Replace Note: Replace
<resource-id> with the resource ID of the virtual machine scale set and <email-address> with the email address of the administrator.Step 3: Verify the instance termination notification settings by running the following command:<resource-id> with the resource ID of the virtual machine scale set.Step 4: Ensure that the “notifications” property in the output of the above command contains the email address of the administrator.With these steps, you have successfully remediated the misconfiguration “Enable Instance Termination Notifications For Virtual Machine Scale Sets” in Azure using Azure CLI.Using Python
Using Python
To remediate the misconfiguration “Enable Instance Termination Notifications For Virtual Machine Scale Sets” for AZURE using Python, you can follow the below steps:These steps will enable instance termination notifications for the specified VM Scale Set in Azure using Python.
- Import the required libraries:
- Authenticate the client:
- Get the VM Scale Set ID:
- Create an action group:
- Get the action group ID:
- Enable termination notifications for the VM Scale Set: