AZ-024 Microsoft Azure

Resource locks protect critical resources from deletion.

Resource locks protect critical resources from deletion.

Domain
Microsoft Azure
Area
Governance
Automated / manual
Automated

Risk if it fails

Accidental/malicious deletion of key assets.

A misclick or a malicious actor can delete a production database or vault in seconds. A delete-lock forces a deliberate extra step, preventing instant destruction.

How Tess tests it

1 test — each concludes only on cited evidence.

Resource locks protect critical resources from deletion.

Automated
Procedure
List locks on critical resource groups/resources.

Read-only command 

az lock list -o table

More in Microsoft Azure

AZ-001 MFA is enforced for all users, especially privileged roles. AZ-002 Number of Global Administrators is limited (typically 2-4). AZ-003 Privileged Identity Management (PIM) provides just-in-time elevation. AZ-004 Legacy/basic authentication is blocked.

Want Tess to test AZ-024 against your evidence?

Book a demo