Azure Compliance ControlsMicrosoft Defender for Cloud
Azure subscriptions should have Microsoft Defender for Cloud pricing set to Standard
This control checks whether Security center pricing is set to standard. This control is non-compliant if pricing is set to free.
Related controls
- ASC Default policy settings should not have any setting set to 'Disabled'
- Azure subscriptions should have Microsoft Defender for APIs set to 'On'
- Microsoft Defender for Cloud settings should have 'Additional email addresses' configured with a security contact email
- Running container images should have no unresolved vulnerabilities
- Virtual machines should have a vulnerability assessment solution enabled
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
securitycenter_pricing_standard - Checkov Check:
CKV_AZURE_19 - Powerpipe Control:
azure_compliance.control.securitycenter_pricing_standard - KICS Query:
819d50fd-1cdf-45c3-9936-be408aaad93e - Trivy Check:
AZU-0045
Last reviewed: 2026-10-15