The required contact details should be set for security center

Explanation

It is recommended that at least one valid contact is configured for the security center. Microsoft will notify the security contact directly in the event of a security incident and will look to use a telephone number in cases where a prompt response is required.

Possible Impact

Without a telephone number set, Azure support can’t contact

Suggested Resolution

Set a telephone number for security center contact

Insecure Example

The following example will fail the azure-security-center-set-required-contact-details check.

resource "azurerm_security_center_contact" "bad_example" {
  email = "bad_contact@example.com"
  phone = ""

  alert_notifications = true
  alerts_to_admins    = true
}

Secure Example

The following example will pass the azure-security-center-set-required-contact-details check.

resource "azurerm_security_center_contact" "good_example" {
  email = "good_contact@example.com"
  phone = "+1-555-555-5555"

  alert_notifications = true
  alerts_to_admins    = true
}

Getting Started
Provider Checks
Config
GitHub Actions