Control: Service bus namespace should be configured with Azure Active Directory (Azure AD) authentication
Description
This policy identifies Service bus namespaces that are not configured with Azure Active Directory (Azure AD) authentication and are enabled with local authentication. Azure AD provides superior security and ease of use over shared access signatures (SAS). With Azure AD, there's no need to store the tokens in your code and risk potential security vulnerabilities. It is recommended to configure the Service bus namespaces with Azure AD authentication so that all actions are strongly authenticated.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.servicebus_namespace_azure_ad_authentication_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.servicebus_namespace_azure_ad_authentication_enabled --share
SQL
This control uses a named query:
servicebus_namespace_azure_ad_authentication_enabled