Control: Network security groups should restrict inbound ICMP port access from internet
Description
Network security group provide stateful filtering of inbound/outbound network traffic to Azure resources. It is recommended that no network security group allows unrestricted inbound access to ICMP port.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.network_security_group_restrict_inbound_icmp_port
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.network_security_group_restrict_inbound_icmp_port --share
SQL
This control uses a named query:
network_security_group_restrict_inbound_icmp_port