Azure Compliance ControlsAzure Virtual Machines
Linux machines should have the Azure compute security baseline requirements satisfied
Requires that prerequisites are deployed to the policy assignment scope. Machines are non-compliant if the machine is not configured correctly for one of the recommendations in the Azure compute security baseline.
What this control checks
Linux machines pass or fail based on the Azure compute security baseline check in the control name
Framework mappings
The clauses this control is mapped to in each framework.
- Configuration Settings (CM-6)
FedRAMP Moderate Baseline Rev 4
- CM-6 Configuration Settings
- 3.4.1 Establish and maintain baseline configurations and inventories of organizational systems (including hardware, software, firmware, and documentation) throughout the respective system development life cycles
- 3.4.2 Establish and enforce security configuration settings for information technology products employed in organizational systems
- CM.L2-3.4.1 Establish and maintain baseline configurations and inventories of organizational systems (including hardware, software, firmware, and documentation) throughout the respective system development life cycles
- CM.L2-3.4.2 Establish and enforce security configuration settings for information technology products employed in organizational systems
- CM-6 Configuration Settings
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
compute_vm_meet_security_baseline_requirements_linux - Powerpipe Control:
azure_compliance.control.compute_vm_meet_security_baseline_requirements_linux - Azure Policy Definition:
fc9b3da7-8347-4380-8e70-0a0361d8dedd
Last reviewed: 2026-10-11