Control: Ensure an Azure Bastion Host exists
Description
The Azure Bastion service allows secure remote access to Azure Virtual Machines over the Internet without exposing remote access protocol ports and services directly to the Internet. The Azure Bastion service provides this access using TLS over 443/TCP, and subscribes to hardened configurations within an organization's Azure Active Directory service.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.network_bastion_host_min_1
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.network_bastion_host_min_1 --share
SQL
This control uses a named query:
network_bastion_host_min_1