1. Log in to the Azure portal (https://portal.azure.com/).
2. Click on the “Security Center” option from the left-hand menu.
3. Click on the “Security Policy” option from the Security Center menu.
4. Select the security policy that you want to remediate.
5. Click on the “Edit Policy” button located at the top of the screen.
6. Scroll down to the “Adaptive Application Controls” section and click on “Edit”.
7. Enable the “Monitor Adaptive Application Whitelisting setting” option.
8. Click on the “Save” button to save the changes.

​

1. Open the Azure CLI in your terminal or command prompt.
2. Login to your Azure account using the command “az login”.
3. Once you are logged in, select the Azure subscription where the misconfiguration exists using the command az account set --subscription <subscription_id>.
4. Check the current status of the Monitor Adaptive Application Whitelisting setting using the command “az security assessment-metadata show —name “Monitor Adaptive Application Whitelisting setting is not enabled” —query status”.
5. If the current status is “NotApplicable” or “Healthy”, then the misconfiguration does not exist and no further action is required.
6. If the current status is “Unhealthy”, then the misconfiguration exists and needs to be remediated.
7. To remediate the misconfiguration, enable the Monitor Adaptive Application Whitelisting setting using the command “az security assessment set —name “Monitor Adaptive Application Whitelisting setting is not enabled” —status Healthy”.
8. Verify that the misconfiguration has been remediated by checking the status again using the command “az security assessment-metadata show —name “Monitor Adaptive Application Whitelisting setting is not enabled” —query status”.

1. Install the Azure SDK for Python using pip:

pip install azure-mgmt-security

2. Import the necessary modules:

from azure.common.credentials import ServicePrincipalCredentials
from azure.mgmt.security import SecurityCenter

3. Set up the credentials for the Azure account:

subscription_id = '<subscription_id>'
client_id = '<client_id>'
client_secret = '<client_secret>'
tenant_id = '<tenant_id>'

credentials = ServicePrincipalCredentials(
    client_id=client_id,
    secret=client_secret,
    tenant=tenant_id
)

4. Create a SecurityCenter client object:

security_center_client = SecurityCenter(credentials, subscription_id)

5. Get the security policy for the subscription:

policy = security_center_client.policies.get('default')

6. Check if the “Monitor Adaptive Application Whitelisting” setting is enabled:

monitor_aaw = False
for setting in policy.settings:
    if setting.name == 'monitorAdaptiveApplicationWhitelisting':
        monitor_aaw = setting.value
        break

7. If the setting is not enabled, enable it:

if not monitor_aaw:
    for setting in policy.settings:
        if setting.name == 'monitorAdaptiveApplicationWhitelisting':
            setting.value = True
            break

    updated_policy = security_center_client.policies.create_or_update('default', policy)