Grumpy Developer

Also what is up with Policies anyway. How bad is it that I have an account that has 5 out of 14 resource compliance and clicking the account justs list a huge list of item of which I seem to have 31 non-compliant out of 226 on those 14 resources (or I guess 9 since 5 were compliant.

Grumpy Developer@summer600.bsky.social

Always happy to receive notifications from Microsoft Azure that start with "Action required". Especially when they then *NOT* tell me what tennant, but instead just list the TenantId which is a guid so I have to figure out which one it is. 1/

View full thread

Aha, and a extra helpfull "Azure Guidance: Use the threat detection capability of Azure Defender services in Microsoft Defender for Cloud for the respective Azure services." seems to want me to buy some Azure Defender features.

So, it this helpfull advice, or is this upselling me more Azure

Grumpy Developer@summer600.bsky.social

And what does non compliance on "Enable threat detection capabilities" actually mean? Clicking the item show another window (full width this time) that says:

"Security Principle: To support threat detection scenarios, monitor all known resource types for known and expected threats and anomalies. Configure your alert filtering and analytics rules to extract high-quality alerts from log data, agents, or other data sources to reduce false positives."

View full thread

Guess I have to go though this multiple times when I want to assign more than 1 policy to an account.

Why does everything Azure have to look and be so difficult, this is really putting me off, but for some thing I have to use (don't want to use Azure).

View full thread

I suppose I should filter on "MFA" for the Basics\Policy definition that I have to choose. Yep, now I only have 2 left.. However my 1920x1080 full screen browser just shows the first part of the two "[Preview]: Usersmust authenticate with multi-factor ..." so I can't actually see what they are

Luckily I can exapand the column, just not the popup window that just coversa third of the screen. Aha "...create or update resources." and "...delete rerources". I think I need both.... *NO* no multi select even though the checkboxes in front suggest mutl-select you can only choose 1 at a time.

Then the email just say "enable multifactor authentication for you tenant" but I have already enabled this so this is a generic email sent to all "Global administrators" I guess regardless of whether MFA is already enabled or not.

learn.microsoft.comTutorial: Self-enforce MFA through Azure Policy - Azure PolicyLearn how to gather audit events or enforce MFA enforcement on your environment

And then the helpful links like this one learn.microsoft.com/en-us/azure/... just lists a few generic steps, each option however lists a lot of things.