Conformity Updates - Week Ending 13 Feb 2026

New Rules

• OCI-FileStorage-009: Configure Snapshot Policy for File Systems: This rule ensures that your Oracle Cloud Infrastructure (OCI) File Storage file systems have snapshot policies attached.

• KeyVault-021: Ensure Purge Protection is Enabled for Key Vaults: This rule ensures that ‘Purge protection’ is set to ‘Enabled’ for Azure Key Vaults to prevent permanent deletion of key vault objects and maintain data recoverability.

• OCI-IAM-016: Check for Valid IAM User Email Address: This rule ensures that all Oracle Cloud Infrastructure (OCI) IAM user accounts have a valid and current email address.

• StorageAccounts-034: Ensure Key Rotation Reminders are Enabled for Storage Accounts: This rule ensures that ‘Enable key rotation reminders’ is enabled for each Azure Storage Account to maintain a regular cadence of access key regeneration.

• SecurityCenter-046: Ensure Microsoft Defender CSPM is Enabled: This rule ensures that Microsoft Defender CSPM is set to ‘On’ to continuously assess cloud resources for security misconfigurations, compliance risks, and exposure to threats.

Updated Rules

• Functions-006: Exposed Azure Function App: This rule ensures that the functions managed with Azure Function App are not publicly accessible.

• VPC-014: VPC Peering Connections To Accounts Outside Organization: This rule ensures that VPC peering connection is only between AWS accounts of the same organization.

• Config-001: AWS Config Enabled: This rule ensures that AWS Config is enabled in all regions.