{"id":560,"date":"2026-10-12T14:28:34","date_gmt":"2026-10-12T04:28:34","guid":{"rendered":"https:\/\/www.cloudproinc.com.au\/?p=560"},"modified":"2026-10-12T14:28:34","modified_gmt":"2026-10-12T04:28:34","slug":"hardening-azure-wiz-outpost","status":"publish","type":"post","link":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/hardening-azure-wiz-outpost\/","title":{"rendered":"Hardening Azure Wiz Outpost"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">In this Wiz outpost blog post, we will explain the process of hardening Azure Wiz outpost and follow best practices. <\/p>\n\n\n\n<!--more-->\n\n\n\n<div class=\"wp-block-yoast-seo-table-of-contents yoast-table-of-contents\"><h2>Table of contents<\/h2><ul><li><a href=\"#h-hardening-azure-wiz-outpost\" data-level=\"2\">Hardening Azure Wiz Outpost<\/a><\/li><li><a href=\"#h-use-a-dedicated-subscription\" data-level=\"2\">Use a Dedicated Subscription<\/a><\/li><li><a href=\"#h-enable-microsoft-defender-for-cloud\" data-level=\"2\">Enable Microsoft Defender for Cloud<\/a><\/li><li><a href=\"#h-enable-auto-provisioning-of-microsoft-monitoring-agent\" data-level=\"2\">Enable auto-provisioning of Microsoft Monitoring Agent<\/a><\/li><li><a href=\"#h-create-activity-log-alerts\" data-level=\"2\">Create Activity Log Alerts<\/a><\/li><li><a href=\"#h-related-articles\" data-level=\"2\">Related Articles<\/a><\/li><\/ul><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-hardening-azure-wiz-outpost\">Hardening Azure Wiz Outpost<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Azure Wiz outposts allow organisations an extra layer of security by retaining Wiz&#8217;s scanning information inside a dedicated Azure subscription compared to sending the data to Wiz. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This post outlines industry best practices and recommends applying them to the Azure subscription your Azure outpost runs from.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-use-a-dedicated-subscription\">Use a Dedicated Subscription<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Wiz recommends running the Wiz Azure outpost under a dedicated Azure subscription. You should also run Azure commands from Azure Cloud Shell, not from a management machine.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-enable-microsoft-defender-for-cloud\">Enable Microsoft Defender for Cloud <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">With Microsoft Defender for Cloud, Azure can scan and protect all the resources within the subscription, including the AKS cluster and containers that form the outpost.  This will also reduce some of the alerts Wiz generates. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-enable-auto-provisioning-of-microsoft-monitoring-agent\">Enable auto-provisioning of Microsoft Monitoring Agent<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If you enable auto-provisioning, Azure Monitoring Agent (MMA), Azure will install it automatically on every new VM provisioned inside the environment. The MMA scans for vulnerabilities, security events, and more. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-create-activity-log-alerts\">Create Activity Log Alerts<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Azure Monitoring is capable of generating alerts based on specific activities. Make sure you create a resource group dedicated to saving activity log alerts and configure the following alerts:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td>Condition Name<\/td><td>Alert Name<\/td><\/tr><tr><td>Create or Update Network Security Group<br>(networkSecurityGroups)<\/td><td>Activity Log for creating or updating<br>Network Security Groups<\/td><\/tr><tr><td>Delete Network Security Group<br>(networkSecurityGroups)<\/td><td>Activity Log for deleting Network<br>Security Groups<\/td><\/tr><tr><td>Create or Update Security Rule<br>(networkSecurityGroups\/securityRules)<\/td><td>Activity Log for creating or updating<br>Network Security Group Rules<\/td><\/tr><tr><td>Delete Security Rule<br>(networkSecurityGroups\/securityRules)<\/td><td>Activity Log for deleting Network<br>Security Group Rules<\/td><\/tr><tr><td>Create or Update Security Solutions<br>(securitySolutions)<\/td><td>Activity Log for creating or updating<br>Security Solutions<\/td><\/tr><tr><td>Update security policy (policies)<\/td><td>Activity Log for updating security<br>policies<\/td><\/tr><tr><td>Delete Security Solutions (securitySolutions)<\/td><td>Activity Log for deleting Security<br>Solutions<\/td><\/tr><tr><td>Create policy assignment (policyAssignments)<\/td><td>Activity Log for creating policy<br>assignments<\/td><\/tr><tr><td>Delete policy assignment (policyAssignments)<\/td><td>Activity Log for deleting policy<br>assignments<\/td><\/tr><tr><td>Create or Update Public Ip Address<br>(publicIPAddresses)<\/td><td>Activity Log for creating or updating<br>Public IP addresses<\/td><\/tr><tr><td>Delete Public Ip Address (publicIPAddresses)<\/td><td>Activity Log for deleting Public IP<br>addresses<\/td><\/tr><tr><td>Create\/Update server firewall rule<br>(servers\/firewallRules)<\/td><td>Activity Log for creating or updating<br>server firewall rules<\/td><\/tr><tr><td>Delete server firewall rule (servers\/firewallRules)<\/td><td>Activity Log for deleting server<br>firewall rules<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Once you create the alert, make sure they are integrated with <a href=\"https:\/\/www.cloudproinc.com.au\/index.php\/2024\/07\/15\/monitoring-azure-vpn-tunnel-uptime\/\">Azure monitoring<\/a> <\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-related-articles\">Related Articles <\/h2>\n\n\n\n<ul class=\"wp-block-yoast-seo-related-links yoast-seo-related-links\">\n<li><a href=\"null\">Maximizing Security: When to Use Wiz Outpost with Azure<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.cloudproinc.com.au\/index.php\/2024\/07\/25\/how-to-deploy-a-wiz-outpost-to-microsoft-azure\/\">How to Deploy a Wiz Outpost to Microsoft Azure<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.cloudproinc.com.au\/index.php\/wiz-security-deployment-services\/\">Wiz Security Deployment Services<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/cloudproinc.com.au\/index.php\/2024\/07\/23\/how-to-use-microsoft-graph-security-api\/\">How to Use Microsoft Graph Security API<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.cloudproinc.com.au\/index.php\/2024\/07\/29\/recover-deleted-or-lost-exchange-online-emails-to-pst\/\">Recover Deleted or Lost Exchange Online Emails to PST<\/a><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In this Wiz outpost blog post, we will explain the process of hardening Azure Wiz outpost and follow best practices.<\/p>\n","protected":false},"author":1,"featured_media":561,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"off","_et_pb_old_content":"","_et_gb_content_width":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[16,13,15],"tags":[],"class_list":["post-560","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-microsoft-azure","category-blog","category-wiz"],"jetpack-related-posts":[{"id":435,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/how-to-deploy-a-wiz-outpost-to-microsoft-azure\/","url_meta":{"origin":560,"position":0},"title":"How to Deploy a Wiz Outpost to Microsoft Azure","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"This Wiz Security article will explain how to deploy a Wiz outpost to Microsoft Azure cloud infrastructure. Listen to this article Before we discuss how to deploy an outpost, it is important to understand why many companies do so. A Wiz outpost is the deployment of the Wiz security scanner\u2026","rel":"","context":"In &quot;Azure&quot;","block_context":{"text":"Azure","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/microsoft-azure\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2024\/07\/How-to-Deploy-a-Wiz-Outpost-to-Microsoft-Azure.webp","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2024\/07\/How-to-Deploy-a-Wiz-Outpost-to-Microsoft-Azure.webp 1x, \/wp-content\/uploads\/2024\/07\/How-to-Deploy-a-Wiz-Outpost-to-Microsoft-Azure.webp 1.5x, \/wp-content\/uploads\/2024\/07\/How-to-Deploy-a-Wiz-Outpost-to-Microsoft-Azure.webp 2x, \/wp-content\/uploads\/2024\/07\/How-to-Deploy-a-Wiz-Outpost-to-Microsoft-Azure.webp 3x, \/wp-content\/uploads\/2024\/07\/How-to-Deploy-a-Wiz-Outpost-to-Microsoft-Azure.webp 4x"},"classes":[]},{"id":289,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/maximizing-security-when-to-use-wiz-outpost-with-azure\/","url_meta":{"origin":560,"position":1},"title":"Maximizing Security: When to Use Wiz Outpost with Azure","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"In this Wiz blog post, we will explain when to use a Wiz Outpost with Azure and the benefits of using an outpost. Wiz.io is a cloud security platform that provides comprehensive protection for cloud-native environments. It offers real-time visibility into security risks and vulnerabilities across multi-cloud infrastructures, allowing organizations\u2026","rel":"","context":"In &quot;Azure&quot;","block_context":{"text":"Azure","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/microsoft-azure\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2024\/05\/Maximizing-Security_-When-to-Use-Wiz-Outpost-with-Azure.-The-image-should-depict-a-secure-cloud-environment-.webp","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2024\/05\/Maximizing-Security_-When-to-Use-Wiz-Outpost-with-Azure.-The-image-should-depict-a-secure-cloud-environment-.webp 1x, \/wp-content\/uploads\/2024\/05\/Maximizing-Security_-When-to-Use-Wiz-Outpost-with-Azure.-The-image-should-depict-a-secure-cloud-environment-.webp 1.5x, \/wp-content\/uploads\/2024\/05\/Maximizing-Security_-When-to-Use-Wiz-Outpost-with-Azure.-The-image-should-depict-a-secure-cloud-environment-.webp 2x"},"classes":[]},{"id":377,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/monitoring-azure-vpn-tunnel-uptime\/","url_meta":{"origin":560,"position":2},"title":"Monitoring Azure VPN Tunnel Uptime","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"This Microsoft Azure article will show you how to monitor Azure VPN Tunnel uptime using Azure monitor. As a Microsoft partner, we help many organisations build and secure Azure tenants across global regions and between data centres. When setting up a VPN tunnel, the most common task is to enable\u2026","rel":"","context":"In &quot;Azure&quot;","block_context":{"text":"Azure","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/microsoft-azure\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2024\/07\/monitoring-Azure-VPN-tunnel.webp","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2024\/07\/monitoring-Azure-VPN-tunnel.webp 1x, \/wp-content\/uploads\/2024\/07\/monitoring-Azure-VPN-tunnel.webp 1.5x, \/wp-content\/uploads\/2024\/07\/monitoring-Azure-VPN-tunnel.webp 2x, \/wp-content\/uploads\/2024\/07\/monitoring-Azure-VPN-tunnel.webp 3x, \/wp-content\/uploads\/2024\/07\/monitoring-Azure-VPN-tunnel.webp 4x"},"classes":[]},{"id":53463,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/how-to-authenticate-to-azure-cli-with-a-service-principal\/","url_meta":{"origin":560,"position":3},"title":"How to Authenticate to Azure CLI with a Service Principal","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"In this blog post, we'll show you how to authenticate to Azure CLI with a Service Principal and login to Azure. Azure CLI is a command-line utility written in Python that allows users to manage Azure resources programmatically. It is widely used by DevOps engineers, developers, and IT professionals to\u2026","rel":"","context":"In &quot;Azure&quot;","block_context":{"text":"Azure","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/microsoft-azure\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2024\/10\/Creating-a-Text-to-Speech-Power-App-Using-OpenAI-Whisper.webp","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2024\/10\/Creating-a-Text-to-Speech-Power-App-Using-OpenAI-Whisper.webp 1x, \/wp-content\/uploads\/2024\/10\/Creating-a-Text-to-Speech-Power-App-Using-OpenAI-Whisper.webp 1.5x, \/wp-content\/uploads\/2024\/10\/Creating-a-Text-to-Speech-Power-App-Using-OpenAI-Whisper.webp 2x"},"classes":[]},{"id":563,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/create-a-naming-policy-for-microsoft-365-groups\/","url_meta":{"origin":560,"position":4},"title":"Create a Naming Policy for Microsoft 365 Groups","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"This Microsoft 365 Entra ID post will explain how to Create a Naming Policy for Microsoft 365 Groups. Table of contentsRequirementsAttributesCreate a Naming Policy for Microsoft 365 GroupsApply Microsoft 365 Naming PolicyMore Articles on the topic Microsoft 365 group naming policy allows organisations to apply naming convention policies for group\u2026","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2024\/07\/Setting-Up-Email-to-Case-in-Dynamics-365.webp","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2024\/07\/Setting-Up-Email-to-Case-in-Dynamics-365.webp 1x, \/wp-content\/uploads\/2024\/07\/Setting-Up-Email-to-Case-in-Dynamics-365.webp 1.5x, \/wp-content\/uploads\/2024\/07\/Setting-Up-Email-to-Case-in-Dynamics-365.webp 2x"},"classes":[]},{"id":784,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/create-an-app-registration-for-microsoft-azure-sdk-for-net\/","url_meta":{"origin":560,"position":5},"title":"Create an App Registration for Microsoft Azure SDK for .NET","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"In this\u00a0\u00a0Azure\u00a0REST API post, I will show you how to create an App Registration for Microsoft Azure SDK for .NET. Azure SDK for .NET allows us to manage Azure programmatically using .NET libraries. Using the SDK, we can create and manage any Azure resource. The Azure SDK for .NET has\u2026","rel":"","context":"In &quot;.NET&quot;","block_context":{"text":".NET","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/net\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2024\/09\/create-an-Azure-AI-Translator-service-using-the-Azure-REST-API.webp","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2024\/09\/create-an-Azure-AI-Translator-service-using-the-Azure-REST-API.webp 1x, \/wp-content\/uploads\/2024\/09\/create-an-Azure-AI-Translator-service-using-the-Azure-REST-API.webp 1.5x, \/wp-content\/uploads\/2024\/09\/create-an-Azure-AI-Translator-service-using-the-Azure-REST-API.webp 2x"},"classes":[]}],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"\/wp-content\/uploads\/2024\/08\/Hardening-Azure-Wiz-outpost.webp","_links":{"self":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/560","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/comments?post=560"}],"version-history":[{"count":1,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/560\/revisions"}],"predecessor-version":[{"id":562,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/560\/revisions\/562"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media\/561"}],"wp:attachment":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media?parent=560"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/categories?post=560"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/tags?post=560"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}