Query: keyvault_vault_public_network_access_disabled

select
  a.id as resource,
  case
  -- In case'defaultAction' = 'Allow', All Network including internet is allowed
  -- Default All network will have not network_acls associated
    when network_acls is null or network_acls ->> 'defaultAction' != 'Deny' then 'alarm'
    else 'ok'
  end as status,
  case
    when network_acls is null or network_acls ->> 'defaultAction' != 'Deny' then a.name || ' public network access enabled.'
    else a.name || ' public network access disabled.'
  end as reason
  
  , a.resource_group as resource_group
  , sub.display_name as subscription
from
  azure_key_vault a,
  azure_subscription sub;