Control: Azure DDoS Protection Standard should be enabled
Description
DDoS protection standard should be enabled for all virtual networks with a subnet that is part of an application gateway with a public IP.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.network_ddos_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.network_ddos_enabled --share
SQL
This control uses a named query:
network_ddos_enabled