You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/service-health/stay-informed-security.md
+11-11Lines changed: 11 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -18,43 +18,43 @@ This article shows you where Azure customers receive Azure security notification
18
18
19
19
You receive security-related notifications affecting your Azure **subscription** workloads in two ways:
20
20
21
-
**1. Security Advisory in [Azure Service Health](https://azure.microsoft.com/en-us/get-started/azure-portal/service-health/)**
21
+
**1. Security Advisory in [Azure Service Health](https://azure.microsoft.com/get-started/azure-portal/service-health/)**
22
22
23
-
Service health notifications are published by Azure and contain information about the resources under your subscription. You can review these security advisories in the Service Health experience in the Azure Portal and get notified about security advisories via your preferred channel by setting up Service Health alerts for this type of notification. You can create [Activity Log alerts](https://learn.microsoft.com/azure/service-health/alerts-activity-log-service-notifications-portal) on Service notifications by using the Azure Portal.
23
+
Service health notifications are published by Azure and contain information about the resources under your subscription. You can review these security advisories in the Service Health experience in the Azure Portal and get notified about security advisories via your preferred channel by setting up Service Health alerts for this type of notification. You can create [Activity Log alerts](../azure/service-health/alerts-activity-log-service-notifications-portal.md) on Service notifications by using the Azure Portal.
24
24
25
25
>[!Note]
26
-
>Depending on your requirements, you can configure various alerts to use the same [action group](https://learn.microsoft.com/azure/azure-monitor/alerts/action-groups) or different action groups. Action group types include sending a voice call, SMS, or email. You can also trigger various types of automated actions. For detailed information about notification and action types, see [Action-specific information](https://learn.microsoft.com/azure/azure-monitor/alerts/action-groups#action-specific-information).
26
+
>Depending on your requirements, you can configure various alerts to use the same [action group](../azure/azure-monitor/alerts/action-groups.md) or different action groups. Action group types include sending a voice call, SMS, or email. You can also trigger various types of automated actions. For detailed information about notification and action types, see [Action-specific information](../azure/azure-monitor/alerts/action-groups#action-specific-information.md).
27
27
28
28
**2. Email Notification**
29
29
30
30
If a security issue requires direct action taken by subscription admins/owners, or critical and sensitive resource information needs to be shared, we send an email notification to subscription admins/owners.
31
31
32
32
>[!Note]
33
-
>You should ensure that there is a **contactable email address** as the [subscription administrator or subscription owner](https://learn.microsoft.com/azure/cost-management-billing/manage/add-change-subscription-administrator). This email address is used for security issues that would have impact at the subscription level.
33
+
>You should ensure that there is a **contactable email address** as the [subscription administrator or subscription owner](../azure/cost-management-billing/manage/add-change-subscription-administrator.md). This email address is used for security issues that would have impact at the subscription level.
34
34
35
35
#### Security Issues affecting your Azure tenant workloads
36
36
37
37
We typically communicate security-related information affecting your Azure **tenant** workloads via **Email Notification**. We send an email notification to Global admin and Technical Contacts
38
38
39
39
>[!Note]
40
-
>You should ensure that there is a **contactable email address** entered for your organization's [Global Admin](https://learn.microsoft.com/azure/active-directory/roles/permissions-reference) and [Technical contact](https://learn.microsoft.com/azure/active-directory/fundamentals/active-directory-properties-area) on your tenant. This email address is used for security issues that would have impact at the tenant level.
40
+
>You should ensure that there is a **contactable email address** entered for your organization's [Global Admin](../azure/active-directory/roles/permissions-reference.md) and [Technical contact](../azure/active-directory/fundamentals/active-directory-properties-area.md) on your tenant. This email address is used for security issues that would have impact at the tenant level.
41
41
42
42
## Three steps to help you stay informed about Azure security issues
43
43
44
44
**1. Check Contact on Subscription Admin Owner Role**
45
45
46
-
Ensure that there is a **contactable email address** as the [subscription administrator or subscription owner](https://learn.microsoft.com/azure/cost-management-billing/manage/add-change-subscription-administrator). This email address is used for security issues that would have impact at the subscription level.
46
+
Ensure that there is a **contactable email address** as the [subscription administrator or subscription owner](../azure/cost-management-billing/manage/add-change-subscription-administrator.md). This email address is used for security issues that would have impact at the subscription level.
47
47
48
48
**2. Check Contact on Tenant Global Admin and Technical Contact Role**
49
49
50
-
Ensure that there is a **contactable email address** entered for your [Global Admin](https://learn.microsoft.com/azure/active-directory/roles/permissions-reference) and [Technical contact](https://learn.microsoft.com/azure/active-directory/fundamentals/active-directory-properties-area) on your tenant. This email address is used for security issues that would have an impact at the tenant level.
50
+
Ensure that there is a **contactable email address** entered for your [Global Admin](../azure/active-directory/roles/permissions-reference.md) and [Technical contact](../azure/active-directory/fundamentals/active-directory-properties-area.md) on your tenant. This email address is used for security issues that would have an impact at the tenant level.
51
51
52
52
**3. Create Azure Service Health Alerts for Subscription Notifications**
53
53
54
-
Create **Azure Service Health** alerts for security events so that your organization can be alerted for any security event that Microsoft identifies. This is the same channel you would configure to be alerted of outages, or maintenance information on the platform: [Create Activity Log Alerts on Service Notifications using the Azure portal](https://learn.microsoft.com/azure/service-health/alerts-activity-log-service-notifications-portal).
54
+
Create **Azure Service Health** alerts for security events so that your organization can be alerted for any security event that Microsoft identifies. This is the same channel you would configure to be alerted of outages, or maintenance information on the platform: [Create Activity Log Alerts on Service Notifications using the Azure portal](../azure/service-health/alerts-activity-log-service-notifications-portal.md).
55
55
56
-
Depending on your requirements, you can configure various alerts to use the same [action group](https://learn.microsoft.com/azure/azure-monitor/alerts/action-groups) or different action groups. Action group types include sending a voice call, SMS, or email. You can also trigger various types of automated actions. For detailed information about notification and action types, see [Action-specific information](https://learn.microsoft.com/azure/azure-monitor/alerts/action-groups#action-specific-information).
56
+
Depending on your requirements, you can configure various alerts to use the same [action group](../azure/azure-monitor/alerts/action-groups.md) or different action groups. Action group types include sending a voice call, SMS, or email. You can also trigger various types of automated actions. For detailed information about notification and action types, see [Action-specific information](../azure/azure-monitor/alerts/action-groups#action-specific-information.md).
57
57
58
-
There’s an important difference between Service Health security advisories and [Microsoft Defender for Cloud](https://learn.microsoft.com/azure/defender-for-cloud/defender-for-cloud-introduction) security notifications. Security advisories in Service Health provide notifications dealing with platform vulnerabilities and security and privacy breaches at the subscription and tenant level, while security notifications in Microsoft Defender for Cloud communicate vulnerabilities that pertain to affected individual Azure resources.
58
+
There’s an important difference between Service Health security advisories and [Microsoft Defender for Cloud](../azure/defender-for-cloud/defender-for-cloud-introduction.md) security notifications. Security advisories in Service Health provide notifications dealing with platform vulnerabilities and security and privacy breaches at the subscription and tenant level, while security notifications in Microsoft Defender for Cloud communicate vulnerabilities that pertain to affected individual Azure resources.
59
59
60
-
More information about the Azure Service Health notifications can be found at: [What are Azure service health notifications? - Azure Service Health | Microsoft Learn](https://learn.microsoft.com/azure/service-health/service-health-notifications-properties)
60
+
More information about the Azure Service Health notifications can be found at: [What are Azure service health notifications? - Azure Service Health | Microsoft Learn](../azure/service-health/service-health-notifications-properties.md)
0 commit comments