Overview
You may have resources within Azure that should always be ignored by Drata's compliance automation tests. Sometimes these are new resources that spin up each day. The exclusion tag functionality allows you to exclude these resources using a tag within Azure.
IMPORTANT NOTE ABOUT SUPPORTED RESOURCE TYPES
Drata currently supports tag-based exclusion only for the following Azure resource types:
Container Instances
Storage Accounts
Kubernetes Clusters
Virtual Machines
At this time, Azure database services, including Azure SQL, PostgreSQL Flexible Server, do not support the DrataExclude tag. Applying the tag to these resources will not exclude them from monitoring.
Create Exclusion Tags
We support tag-based exclusion of Azure resources from Drata's monitors. In Azure, these tags should have a Name field of DrataExclude. This is case-sensitive; drataexclude will not pass.
Container Instances
Option 1: Add a Tag During Storage Account Creation
Select Create to begin. This opens the full configuration flow.
Navigate to the Tags section and enter the following information:
Name field: Enter
DrataExcludeValue field: Not Applicable.
Continue through the configuration and select Review + Create.
Option 2: Add a Tag to an Existing Storage Account
From the Container Instances dashboard, choose the resource, then navigate to its Tags menu.
Add a tag with the name DrataExclude
Then click Apply
Storage Accounts
Option 1: Add a Tag During Storage Account Creation
1. Select Create to begin setting up a new Storage Account. This opens the full configuration flow.
2. Navigate to the Tags section.
In the Name field, enter:
DrataExcludeEnsure the resource type includes Storage Accounts.
3. Continue through the configuration and select Review + Create.
Option 2: Add a Tag to an Existing Storage Account
In Azure, go to Storage Accounts and select the account you want to edit.
In the left-hand menu, open the Tags section.
Add a new tag:
Name:
DrataExclude
Select Apply.
Kubernetes Clusters
Option 1: Add a Tag During Storage Account Creation
In Azure, go to Kubernetes services.
Click + Create, then navigate to the Tags tab.
Enter DrataExclude for the name.
Option 2: Add a Tag to an Existing Storage Account
From the Kubernetes services dashboard, choose the desired resource, then navigate to its
Tagsmenu.Add a tag with the name
DrataExclude, then clickApplyorReview + createto save your changes.
Virtual Machines
Option 1: Add a Tag During Storage Account Creation
You can add a tag during the initial configuration of a virtual machine.
In Azure, go to Virtual machines → + Create → Tags tab.
Option 2: Add a Tag to an Existing Storage Account
You can also add tags to existing VMs. From Virtual machines navigate to the Tags menu and select the desired resource.
Add a tag with the name DrataExclude, then click Apply or Review + create.
