turbot/steampipe-mod-azure-compliance

Control: Data factories should disable public network access

Description

Disabling public network access improves security by ensuring that your Data Factory is not exposed on the public internet.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.data_factory_public_network_access_disabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.data_factory_public_network_access_disabled --share

SQL

This control uses a named query:

select
a.id as resource,
case
when public_network_access = 'Enabled' then 'alarm'
else 'ok'
end as status,
case
when public_network_access = 'Enabled' then a.name || ' public network access enabled.'
else a.name || ' public network access disabled.'
end as reason
, a.resource_group as resource_group
, sub.display_name as subscription
from
azure_data_factory as a,
azure_subscription as sub
where
sub.subscription_id = a.subscription_id;

Tags