Control types for @turbot/azure-securitycenter

• Azure > Security Center > Security Center > CMDB
• Azure > Security Center > Security Center > Defender Plan
• Azure > Security Center > Security Center > Discovery

Azure > Security Center > Security Center > CMDB

Record and synchronize details for the Azure Security Center into the CMDB.

The CMDB control is
responsible for populating and updating all the attributes for that
resource type in the Guardrails CMDB.

Note that if CMDB is set to Skip for a resource, then it will not be added
to the CMDB, and no controls that target it will run.

Azure > Security Center > Security Center > Defender Plan

Configure Defender Plan settings on Azure > Security Center > Security Center.

Azure > Security Center > Security Center > Discovery

Discover Azure Security Center and add them to Guardrails.

The Discovery
control is tasked with identifying instances for a particular resource.
The Discovery control will periodically search for new target resources and
save them to the Guardrails CMDB. Once discovered, resources are then
responsible for tracking changes to themselves through the
CMDB control.