turbot/azure_compliance

Control: Ensure an Azure Bastion Host exists

Description

The Azure Bastion service allows secure remote access to Azure Virtual Machines over the Internet without exposing remote access protocol ports and services directly to the Internet. The Azure Bastion service provides this access using TLS over 443/TCP, and subscribes to hardened configurations within an organization's Azure Active Directory service.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.network_bastion_host_min_1

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.network_bastion_host_min_1 --share

SQL

This control uses a named query:

network_bastion_host_min_1

Tags