turbot/azure_compliance

Control: Network security groups should restrict inbound ICMP port access from internet

Description

Network security group provide stateful filtering of inbound/outbound network traffic to Azure resources. It is recommended that no network security group allows unrestricted inbound access to ICMP port.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.network_security_group_restrict_inbound_icmp_port

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.network_security_group_restrict_inbound_icmp_port --share

SQL

This control uses a named query:

network_security_group_restrict_inbound_icmp_port

Tags