Microsoft Defender For Cloud - Compliance

[marrobi]

As an Azure Administrator I want the components deployed as part of the Azure TRE is compliant with my organizations security requirements as defined by Microsoft Defender For Cloud policies.

All exemptions should be documented and applied as part of the deployment. Tasks will need to be created for remediation work.

• Azure Security Benchmark V3 / Microsoft Cloud Security Benchmark V1
• UK NHS
• HIPAA compliance

Tasks:

• Review storage accounts with anonymous access and block is possible #2514
• Add Log Analytics Extension to VM and VMSS in core #2515
• Add Endpoint protection solution to windows VMs #2516
• Add Keyvault diagnostics in base workspace template #2517
• Review and add private endpoints to storage accounts in core #2518
• Add VMSS diagnostics in core #2519