Control: Ensure that HTTP(S) access from the Internet is evaluated and restricted
Description
Network security groups should be periodically evaluated for port misconfigurations. Where certain ports and protocols may be exposed to the Internet, they should be evaluated for necessity and restricted wherever they are not explicitly required and narrowly configured.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.network_security_group_https_access_restricted
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.network_security_group_https_access_restricted --share
SQL
This control uses a named query:
network_security_group_https_access_restricted