No Security Contact Email Set
More Info:
At least one security contact email should be set.Risk Level
LowAddress
SecurityCompliance Standards
CISAZURE, CBPTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration of “No Security Contact Email Set” in Azure, you can follow these steps:
- Log in to the Azure portal (https://portal.azure.com/).
- Click on the “Security Center” icon from the left-hand menu.
- In the Security Center, click on “Security policy” from the left-hand menu.
- Under the “Policy Management” section, click on the policy that is not compliant with the email set requirement.
- In the policy details, click on the “Edit” button.
- In the “Edit policy” window, scroll down to the “Notifications” section.
- Ensure that the “Send email notifications” toggle is set to “On”.
- In the “Security contact email” field, enter the email address that should receive the security notifications.
- Click on the “Save” button to save the changes.
- Verify that the policy is now compliant by checking the “Compliance” status in the policy details.
Using CLI
Using CLI
To remediate the “No Security Contact Email Set” misconfiguration in Azure using Azure CLI, follow these steps:Replace This command will display the details of the security contact, including the email address.Replace
- Open the Azure CLI on your local machine or in the Azure portal.
- Run the following command to set the security contact email:
<email_address> with the email address you want to set as the security contact. You can also replace “Security Contact” with a different name for the contact.- Verify that the email address has been set by running the following command:
- If you need to update the security contact email address in the future, you can use the following command:
<new_email_address> with the new email address you want to use for the security contact.By following these steps, you can remediate the “No Security Contact Email Set” misconfiguration in Azure using Azure CLI.Using Python
Using Python
To remediate the misconfiguration of “No Security Contact Email Set” in Azure using Python, you can follow the steps below:Note: Replace
- Import the necessary libraries:
- Authenticate with Azure using the
DefaultAzureCredentialclass:
- Create a
SecurityCenterclient object:
- Get the security contact email for the subscription:
- If the security contact email is not set, set it to a valid email address:
- Verify that the security contact email has been set:
<your-subscription-id> and <your-email-address> with your own values.By following the above steps, you can remediate the misconfiguration of “No Security Contact Email Set” in Azure using Python.