# Elastic CSPM Azure Exclude resources from rules

**URL:** <https://discuss.elastic.co/t/elastic-cspm-azure-exclude-resources-from-rules/364057>\
**Category:** Elastic Security\
**Created:** [July 30, 2024, 12:36pm UTC](https://discuss.elastic.co/t/elastic-cspm-azure-exclude-resources-from-rules/364057 "2024-07-30T12:36:23Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![willemdh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/willemdh/32/16922_2.png) [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Post date:** [July 30, 2024, 12:36pm UTC](https://discuss.elastic.co/t/elastic-cspm-azure-exclude-resources-from-rules/364057/1 "2024-07-30T12:36:23Z")

</div>

Hello,

What we are missing in Elastic CSPM is a way to exclude resources from certain rules. Some rules are triggering on all resources, while these rules are not applicable to these resources.

For example:

`Ensure the web app has 'Client Certificates (Incoming client certificates)' set to 'On'`

For at least 80 % of our web apps it is not possible to use client certificates, as we cannot predict what clients need access.

This is just 1 example out of many.

Is it on some roadmap to add functionality which allows to exclude specific resources for specific CSPM rules instead of having to disable complete rule?

WillemD

---

<div class="post-metadata">

**Author:** ![smriti0321](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/smriti0321/32/132794_2.png) [@smriti0321](https://discuss.elastic.co/u/smriti0321)\
**Post date:** [July 30, 2024, 2:01pm UTC](https://discuss.elastic.co/t/elastic-cspm-azure-exclude-resources-from-rules/364057/2 "2024-07-30T14:01:38Z")

</div>

Hi @willemdh,

Thanks for sharing your use case. As of today we only support disabling specific rules. I agree that resource exclusion will allow more control to users as we advance the CSPM offering. We will add it to our backlog and track it against other priorities.

Regards,  
Smriti

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 27, 2024, 2:01pm UTC](https://discuss.elastic.co/t/elastic-cspm-azure-exclude-resources-from-rules/364057/3 "2024-08-27T14:01:54Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.