Query: Secure Boot should be enabled on supported Windows virtual machines

Description

Enable Secure Boot on supported Windows virtual machines to mitigate against malicious and unauthorized changes to the boot chain. Once enabled, only trusted bootloaders, kernel and kernel drivers will be allowed to run. This assessment applies to Trusted Launch and Confidential Windows virtual machines.

Query

Tables used in this query:

• azure_compute_virtual_machine
• azure_subscription

Controls using this query:

• Secure Boot should be enabled on supported Windows virtual machines

SQL