self-service-policy-exemptions-defender-for-cloud

Type: regulative

Decision

Defender for Cloud recommendations with no free remediation path must be pre-exempted by the platform.

Why

An unactionable recommendation left on the dashboard erodes confidence in the rest of the data.

Violations

• Defender for Cloud exemption list containing a recommendation with a free remediation path.

Anchor

no-unapproved-resources

Implements

• guardrail

Files

• landing-zones/defenderForCloudExemptions.jsonc
• landing-zones/bicep/modules/azurePolicy.bicep

← Back to knowledge graph