turbot/azure_compliance

Query: app_configuration_private_link_used

Usage

powerpipe query azure_compliance.query.app_configuration_private_link_used

SQL

select
a.id as resource,
case
-- Only applicable to standard tier
when sku_name = 'free' then 'skip'
-- All networks, including the internet and private endpoints, can access this resource
-- Checking if all network enabled and no private endpoint then it's public access
when public_network_access = 'Enabled' and private_endpoint_connections is null then 'alarm'
when private_endpoint_connections @> '[{"privateLinkServiceConnectionStateStatus": "Approved"}]'::jsonb then 'ok'
else 'alarm'
end as status,
case
when sku_name = 'free' then a.name || ' is of ' || sku_name || ' tier.'
when public_network_access = 'Enabled' and private_endpoint_connections is null then ' using public networks.'
when private_endpoint_connections @> '[{"privateLinkServiceConnectionStateStatus": "Approved"}]'::jsonb then a.name || ' using private link.'
else a.name || ' not using private link.'
end as reason
, a.resource_group as resource_group
, sub.display_name as subscription
from
azure_app_configuration as a,
azure_subscription as sub;

Controls

The query is being used by the following controls: