turbot/azure_compliance

Control: Cosmos DB accounts should disable key based metadata write access

Description

Ensure Cosmos DB accounts have key-based metadata write_access disabled. This control is non-compliant if Cosmos DB accounts have key-based metadata write access enabled.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.cosmosdb_account_key_based_metadata_write_access_disabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.cosmosdb_account_key_based_metadata_write_access_disabled --share

SQL

This control uses a named query:

cosmosdb_account_key_based_metadata_write_access_disabled

Tags