Control: Cosmos DB accounts should disable key based metadata write access
Description
Ensure Cosmos DB accounts have key-based metadata write_access disabled. This control is non-compliant if Cosmos DB accounts have key-based metadata write access enabled.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.cosmosdb_account_key_based_metadata_write_access_disabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.cosmosdb_account_key_based_metadata_write_access_disabled --share
SQL
This control uses a named query:
cosmosdb_account_key_based_metadata_write_access_disabled