Azure missing some of CIS - Benchmarks

Ven Suri 1 Reputation point
2022-04-20T22:30:05.037+00:00

194834-image.png

Azure Blueprints
Azure Blueprints

An Azure service that provides templates for quick, repeatable creation of fully governed cloud subscriptions.

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Torrey Trahanovsky 0 Reputation points Microsoft Employee
    2026-06-29T20:32:30.85+00:00

    The older CIS Microsoft Azure Foundations Benchmark blueprint sample is deprecated, which is

    likely why you're seeing gaps. The supported way to assess and enforce CIS coverage today is the

    built-in Azure Policy regulatory-compliance initiative "CIS Microsoft Azure Foundations Benchmark"

    (surfaced in Microsoft Defender for Cloud → Regulatory compliance). Assign that initiative at the

    subscription/management-group scope to get current CIS control coverage and compliance reporting.

    Heads-up: Azure Blueprints (Preview) is being retired on January 31, 2027, with a phased

    retirement beginning July 31, 2026 (no new definitions/versions after Jul 31, 2026; no

    definition edits or new assignments after Oct 31, 2026; no assignment edits after Dec 31, 2026).

    Resources already deployed remain, but blueprint definitions, assignments, and locks (deny

    assignments) are removed at retirement - export anything you want to keep first.

    Recommended path: migrate to Azure Deployment Stacks (resource grouping, lifecycle management,

    and deny-assignment locking) plus Template Specs for versioned storage.

    • Retirement & timeline: https://aka.ms/AzureBlueprintsRetirement

    • Migration guide: https://aka.ms/AzureBlueprintsMigration

    • FAQ: https://aka.ms/AzureBlueprintsRetirementFAQ

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.