Threat Alert Email To Owner | Vulnerability Database

Security threat alerts go to subcription owners and co-administrators

Subscription owners should be notified when there are security alerts. By ensuring the administrators of the account have been notified they can quickly assist in any required remediation

Impact

Administrators and subscription owners may have a delayed response

Recommended Actions

Follow the appropriate remediation steps below to resolve the issue.

Enable email to subscription owners

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11


 resource "azurerm_mssql_server_security_alert_policy" "good_example" {
   resource_group_name        = azurerm_resource_group.example.name
   server_name                = azurerm_sql_server.example.name
   state                      = "Enabled"
   storage_endpoint           = azurerm_storage_account.example.primary_blob_endpoint
   storage_account_access_key = azurerm_storage_account.example.primary_access_key
   disabled_alerts = []
 
   email_account_admins = true
 }
 

Remediation Links

https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/mssql_server_security_alert_policy#email_account_admins