Azure No Security Contact Phone Set

More Info:

At least one security contact phone should be set.

Risk Level

Low

Address

Security

Compliance Standards

• Cloudanix Best Practice

Triage and Remediation

Remediation

Remediation

Using Console

To remediate the "No Security Contact Phone Set" misconfiguration in Azure using the Azure console, follow these steps:

1. Log in to the Azure portal (https://portal.azure.com/).
2. Click on the "Security Center" icon in the left-hand menu.
3. Click on the "Security policy" link in the Security Center dashboard.
4. In the "Policy" blade, click on the "Edit" button.
5. Scroll down to the "Security contact phone number" policy setting and click on it.
6. Enable the policy by clicking on the "On" button.
7. Enter a valid phone number in the "Security contact phone number" field.
8. Click on the "Save" button to save the policy changes.

Once you have completed these steps, the "No Security Contact Phone Set" misconfiguration will be remediated in Azure.

Using CLI

To remediate the misconfiguration "No Security Contact Phone Set" for AZURE using AZURE CLI, follow these steps:

1. Open the Azure CLI on your local machine or using the Azure Cloud Shell.

2. Run the following command to check the current security contact phone number configuration:

   az security contact show

3. If the output shows that no phone number is set, run the following command to set the security contact phone number:

   az security contact create --email <email-address> --phone <phone-number> --name <contact-name> --alert-notifications true

   Replace the <email-address>, <phone-number>, and <contact-name> placeholders with the appropriate values.

4. After running the command, verify that the security contact phone number has been set by running the following command:

   az security contact show

   The output should show the updated security contact information.

By following these steps, you have successfully remediated the "No Security Contact Phone Set" misconfiguration for AZURE using AZURE CLI.

Using Python

To remediate the misconfiguration of "No Security Contact Phone Set" in Azure using Python, you can use the Azure SDK for Python. Here are the steps to follow:

1. Install the Azure SDK for Python using the following command:

   pip install azure-mgmt-monitor

2. Import the necessary modules and authenticate with Azure using your credentials:

   from azure.common.credentials import UserPassCredentials
   from azure.mgmt.monitor import MonitorManagementClient
   
   # Replace the values with your actual credentials
   credentials = UserPassCredentials(
       'username@your-azure-account.com',
       'your-password'
   )
   
   subscription_id = 'your-subscription-id'
   
   # Create the MonitorManagementClient object
   monitor_client = MonitorManagementClient(
       credentials,
       subscription_id
   )

3. Get the list of all the action groups in your Azure account:

   action_groups = monitor_client.action_groups.list()

4. Check if any of the action groups have a phone number set:

   for action_group in action_groups:
       if action_group.sms_receivers:
           print(f"Phone number set for {action_group.name}")
       else:
           print(f"No phone number set for {action_group.name}")

5. If you find an action group with no phone number set, update it with a valid phone number:

   for action_group in action_groups:
       if not action_group.sms_receivers:
           action_group.sms_receivers = ["+1XXXYYYZZZZ"]  # Replace with your phone number
           monitor_client.action_groups.create_or_update(
               action_group.resource_group_name,
               action_group.name,
               action_group
           )
           print(f"Phone number set for {action_group.name}")

By following these steps, you can remediate the misconfiguration of "No Security Contact Phone Set" in Azure using Python.

Using Terraform

resource "azurerm_security_center_contact" "security_contact" {
  # Replace with a stable, descriptive name for this contact
  name = "DEFAULT"

  # REQUIRED: set at least one security contact email
  email = "SECURITY_CONTACT_EMAIL@example.com"  # <-- replace with a real email

  # REQUIRED: set at least one security contact phone (E.164 format recommended)
  phone = "+1XXXYYYZZZZ"                        # <-- replace with a real phone number

  # Optional but typically recommended settings
  alert_notifications = true
  alerts_to_admins    = "On"
}

Changing the phone value on an existing azurerm_security_center_contact updates the resource in place; it does not force replacement.

Verification: terraform plan should show an in-place update (~) to the existing azurerm_security_center_contact with the phone argument being added or changed.