Email Alerts Disabled

Query id: 9db38e87-f6aa-4b5e-a1ec-7266df259409
Query name: Email Alerts Disabled
Platform: Terraform
Severity: Medium
Category: Observability
CWE: 778
URL: Github

Description¶

Make sure that alerts notifications are set to 'On' in the Azure Security Center Contact
Documentation

Code samples¶

Code samples with security vulnerabilities¶

Positive test num. 1 - tf file

resource "azurerm_security_center_contact" "positive1" {
    email = "contact@example.com"
    phone = "+1-555-555-5555"
   alert_notifications = false
}

Code samples without security vulnerabilities¶

Negative test num. 1 - tf file

resource "azurerm_security_center_contact" "negative1" {
    email = "contact@example.com"
    phone = "+1-555-555-5555"
    alert_notifications = true
}