Configure Periodic Checking for Missing System Updates on Azure Virtual Machines with Azure Policy - Azure Update Manager (AUM)
This guide shows you how you can mitigate an issue with the built-in Azure Update Manager Policy that utilizes System Managed Identity and does not allow read access to Disk Encryption Set by default.
Read article