Currently there is no way to fetch all recommendations from Microsoft Defender for Cloud which are being used in Azure Security Benchmark or in any particular benchmark. I would want to know, if there is any workaround to fetch recommendations based on a particular benchmark or currently this functionality does not exist in Azure REST API.
@pulkitj-3565
Thank you for your post and I apologize for the delayed response!
When it comes to an Azure API to get all the recommendations used within an Azure Security Benchmark or any other benchmark, you should be able to leverage the Regulatory Compliance Controls - List REST API.
GET https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.Security/regulatoryComplianceStandards/{regulatoryComplianceStandardName}/regulatoryComplianceControls?api-version=2019-01-01-preview
If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.
@pulkitj-3565
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?
This partly solves my problem. This API just lists down the controls under a particular benchmark but I need status of individual policies that are linked to each of these compliance controls.
@pulkitj-356
Thank you for following up on this!
When it comes to the status of individual policies that're linked to each of the compliance controls, can you share a screenshot of what you're referring to so I can gain a better understanding of your issue?
If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
12 people are following this question.
