Control: Microsoft Defender for Storage (Classic) should be enabled

powerpipe control run azure_compliance.control.securitycenter_azure_defender_on_for_storage

powerpipe login
powerpipe control run azure_compliance.control.securitycenter_azure_defender_on_for_storage --share

select
  sub_pricing.id as resource,
  case
    when pricing_tier = 'Standard' then 'ok'
    else 'alarm'
  end as status,
  case
    when pricing_tier = 'Standard' then 'Azure Defender on for Storage.'
    else 'Azure Defender off for Storage.'
  end as reason
  
  , sub.display_name as subscription
from
  azure_security_center_subscription_pricing sub_pricing
  right join azure_subscription sub on sub_pricing.subscription_id = sub.subscription_id
where
  name = 'StorageAccounts';