HIGH
Source
Trivy
ID
AVD-AZU-0064

Security Contact Disabled

If a security contact is disabled, critical alerts from Microsoft Defender for Cloud will not be delivered to that contact, potentially causing security incidents to go unnoticed.

Security contacts should be enabled to ensure that designated personnel receive timely notifications about security threats and incidents.

Impact

Follow the appropriate remediation steps below to resolve the issue.

Enable the security contact to ensure security notifications are delivered.

1
2
3
4
5
6
7
8
resource "azurerm_security_center_contact" "good_example" {
  email               = "security@example.com"
  phone               = "+1-555-555-5555"
  alert_notifications = true
  alerts_to_admins    = true

  # Security contact is enabled by default when created
}