...
Description: This control ensures that Monitor missing Endpoint Protection in Azure Security Center is enabled for at least one policy assignment with policy definition Enable Monitoring in Azure Security Center. When this setting is not disabled, it recommends endpoint protection be provisioned for all Windows virtual machines to help identify and remove viruses, spyware, and other malicious software.
...
Perform following to update PostgreSQL parametersendpoint protection:
Login to Azure Portal using https://portal.azure.com.
Go to Policy service.
On Policy overview, Click onDefault/Custom Policy.
Click on Edit Assignments.
In Basics menu, check there are no exclusions added for resource Group.
Set Policy Enforcement to Enabled.
Goto Parameters and set Monitor missing Endpoint Protection in Azure Security Center to AuditIfNotExist
Click Review + save.
...