About

This check looks for Azure virtual machines that use unmanaged disks. Managed disks are storage volumes that Azure maintains for you. They are built for 99.999% availability and are encrypted when they are deployed, so basic protection needs no extra setup. Using managed disks on your virtual machines gives you better data resilience.

ControlMap runs this check as part of the Azure Baseline Controls on your connected Azure subscription. You can see the result in Monitor › Compliance Checks.

Suggested action

Convert the disks on your Azure virtual machines to managed disks.

Convert a virtual machine to managed disks

Do these steps in the Azure portal:

1. Sign in to the Azure portal.
2. Use the search bar to go to Virtual machines.
3. Select the virtual machine you want to convert.
4. In the menu for the virtual machine, select Disks.
5. At the top, select Migrate to managed disks.
6. Follow the prompts to convert the disks, then select Migrate to start the process.

Repeat these steps for each virtual machine that still uses unmanaged disks.

Check the result in ControlMap

ControlMap picks up the change the next time the Azure connection runs. To check sooner:

1. Go to Monitor › Integrations and select your Azure connection.
2. Select Run Once.
3. When the scan has finished, go to Monitor › Compliance Checks and look at the Status of this check.

More information

To learn more about managed disks, see the Microsoft article Overview of Azure managed disks.