Virtual Machine OS disk must use managed disks
High
Azure
General
vm-managed-disks
Applies to
Microsoft.Compute/virtualMachines
What CGPulse checks
A resource passes this rule when storageProfile.osDisk.managedDisk.id must be set true. Anything else is reported as a finding with the evaluated property value attached as evidence.
How to fix it
Migrate to managed disks for built-in encryption, better SLA, and simplified management. In Azure Portal: VM > Disks > Migrate to managed disks. See: https://learn.microsoft.com/en-us/azure/virtual-machines/managed-disks-overview
Terraform
# Managed disks are the default in azurerm_virtual_machine.
# Migration from unmanaged disks requires VM deallocation.
Compliance frameworks
Is your environment compliant with this rule?
CGPulse checks it — and 621 others — against your Azure and AWS accounts with read-only access.
Related Azure rules
- Action Group should be enabled
- Activity Log Alert should be enabled
- AKS cluster logs should be sent to Log Analytics
- AKS cluster must enable RBAC
- AKS cluster must enable RBAC
- AKS cluster should be a private cluster
- AKS cluster should disable local accounts
- AKS cluster should enable Azure RBAC for Kubernetes