Control: All flow log resources should be in enabled state
Description
Audit for flow log resources to verify if flow log status is enabled. Enabling flow logs allows to log information about IP traffic flowing. It can be used for optimizing network flows, monitoring throughput, verifying compliance, detecting intrusions and more.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.network_watcher_flow_log_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.network_watcher_flow_log_enabled --share
SQL
This control uses a named query:
network_watcher_flow_log_enabled