MEDIUM
Source
Trivy
ID
AVD-AZU-0063

Email Alerts Disabled

If Defender for Cloud email alerts are disabled, high-severity issues may go unnoticed.

Email notifications should be enabled to ensure security contacts are notified of critical security alerts and incidents in a timely manner.

Impact

Follow the appropriate remediation steps below to resolve the issue.

Enable alert notifications in Defender for Cloud and configure security contacts.

1
2
3
4
5
6
7
resource "azurerm_security_center_contact" "good_example" {
  email = "security@example.com"
  phone = "+1-555-555-5555"

  alert_notifications = true
  alerts_to_admins    = true
}