Linux machines should have the Azure compute security baseline requirements satisfied
Requires that prerequisites are deployed to the policy assignment scope. Machines are non-compliant if the machine is not configured correctly for one of the recommendations in the Azure compute security baseline.
Machines are non-compliant if the machine is not configured correctly for one of the recommendations in the Azure compute security baseline.
What this control checks
Linux machines pass or fail based on the Azure compute security baseline check in the control name
Common pitfalls
Arc machine option has a monthly charge per machine
IncludeArcMachines has allowed values true and false, with default false. By selecting this option, you agree to be charged monthly per Arc connected machine.
Policy needs prerequisites at the assignment scope
Requires that prerequisites are deployed to the policy assignment scope.
Audit evidence
Evidence that deployed resources meet this control: Azure Policy compliance results for the built-in policy definition "Linux machines should meet requirements for the Azure compute security baseline" (fc9b3da7-8347-4380-8e70-0a0361d8dedd); PowerPipe control azure_compliance.control.compute_vm_meet_security_baseline_requirements_linux.
Framework-specific interpretation
NIST SP 800-53 Rev 5: Mapped to CM-6 (Configuration Settings).
FedRAMP Moderate Baseline Rev 4: Mapped to CM-6 (Configuration Settings).
Framework mappings
The clauses this control is mapped to in each framework.
- Configuration Settings (CM-6)
FedRAMP Moderate Baseline Rev 4
- CM-6 Configuration Settings
- 3.4.1 Establish and maintain baseline configurations and inventories of organizational systems (including hardware, software, firmware, and documentation) throughout the respective system development life cycles
- 3.4.2 Establish and enforce security configuration settings for information technology products employed in organizational systems
- CM.L2-3.4.1 Establish and maintain baseline configurations and inventories of organizational systems (including hardware, software, firmware, and documentation) throughout the respective system development life cycles
- CM.L2-3.4.2 Establish and enforce security configuration settings for information technology products employed in organizational systems
- CM-6 Configuration Settings
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
compute_vm_meet_security_baseline_requirements_linux - Powerpipe Control:
azure_compliance.control.compute_vm_meet_security_baseline_requirements_linux - Azure Policy Definition:
fc9b3da7-8347-4380-8e70-0a0361d8dedd
Last reviewed: 2026-10-11