Virtual machines have a vulnerability assessment solution

# Enable vulnerability assessment for all machines using Microsoft Defender Vulnerability Management
resource "azapi_resource" "<example_resource_name>" {
  type      = "Microsoft.Security/serverVulnerabilityAssessmentsSettings@2022-01-01-preview"
  name      = "AzureServersSetting"
  parent_id = "/subscriptions/<example_subscription_id>"

  body = jsonencode({
    properties = {
      selectedProvider = "MdeTvm" # Critical: sets VA provider so all VMs get vulnerability assessment
    }
    kind = "AzureServersSetting"
  })
}

// Enable vulnerability assessment for all machines using Microsoft Defender Vulnerability Management
// Critical: sets the VA provider so the recommendation becomes Healthy
@description('Deploy at subscription scope')
targetScope = 'subscription'

resource <example_resource_name> 'Microsoft.Security/serverVulnerabilityAssessmentsSettings@2022-01-01-preview' = {
  name: 'AzureServersSetting'
  kind: 'AzureServersSetting'
  properties: {
    selectedProvider: 'MdeTvm' // Critical: enables Defender VA provider for machines
  }
}