Disable Auto Provisioning of LAW agents on VMs

Azure / CanadaPubSecALZ

This reference implementation is based on Cloud Adoption Framework for Azure and provides an opinionated implementation that enables ITSG-33 regulatory compliance by using NIST SP 800-53 Rev. 4 and Canada Federal PBMM Regulatory Compliance Policy Sets.

MIT License

125 stars 90 forks source link

Disable Auto Provisioning of LAW agents on VMs #407

Closed jvescio-ssc closed 4 days ago

jvescio-ssc commented 3 months ago

Since LAW agents are being deprecated, the accelerator shouldn't have defender auto provision LAW agents on sub creation. This forces us to fight with defender to turn it off after the sub has been created.

jvescio-ssc commented 3 months ago

Likely code to comment out of: azresources\security-center\asc.bicep

resource ascAutoProvision 'Microsoft.Security/autoProvisioningSettings@2017-08-01-preview' = { name: 'default' properties: { autoProvision: 'On' } }

github-actions[bot] commented 3 weeks ago

This issue is stale because it has been open 90 days with no activity. Remove stale label or comment or this will be closed in 7 days.