Set Required Contact Details | Vulnerability Database

The required contact details should be set for security center

It is recommended that at least one valid contact is configured for the security center. Microsoft will notify the security contact directly in the event of a security incident and will look to use a telephone number in cases where a prompt response is required.

Impact

Without a telephone number set, Azure support can’t contact

Recommended Actions

Follow the appropriate remediation steps below to resolve the issue.

Log in to the Microsoft Azure Management Console.
Select the “Search resources, services, and docs” option at the top and search for “Microsoft Defender for Cloud”.
On the “Microsoft Defender for Cloud” page, scroll down the left navigation panel and choose “Environment Settings”.
On the “Environment Settings” page, select the “Subscription” by clicking on the “Name”.
Under the “Settings | Defender plans " page, click on the “Email Notifications”
On the “Settings | Email notifications” page under “Email recipients” if the “Additional email addresses (separated by commas)” is empty and only “owner” is selected in “All users with the following roles” then the security alerts are not configured to be sent to the admins.
Under “Email recipients”, click the dropdown for “All users with the following roles” and check mark “AccountAdmin and “ServiceAdmin” along with owner and enter one or more than one “Email addresses” separated by “comma in section “Additional email addresses (separated by commas)”.
Under “Notification types” select “High” from the dropdown next to “Notify about alerts with the following severity (or higher). Click on the “Save” button to make the changes.
Repeat step number 3 - 8 to ensure to ensure that email notifications are configured to be sent to subscription owners.

Set a telephone number for security center contact

1
2
3
4
5
6
7
8


		resource "azurerm_security_center_contact" "good_example" {
		email = "good_contact@example.com"
		phone = "+1-555-555-5555"

		alert_notifications = true
		alerts_to_admins = true
		}
	

Remediation Links

https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/security_center_contact#phone