Use files, branches, or tags for mod dependencies →

Plugins Docs Home

turbot/azure_insights

0Controls

0Variables

activedirectory_deprecated_user_with_owner_role_count activedirectory_deprecated_user_with_owner_status activedirectory_directory_roles_for_activedirectory_group activedirectory_directory_roles_for_activedirectory_user activedirectory_directory_roles_for_user activedirectory_external_guest_user_count activedirectory_external_guest_user_with_owner_role_count activedirectory_external_guest_user_with_owner_role_status activedirectory_group_1_year_count activedirectory_group_24_hours_count activedirectory_group_30_90_days_count activedirectory_group_30_days_count activedirectory_group_90_365_days_count activedirectory_group_age_table activedirectory_group_by_creation_month activedirectory_group_by_tenant activedirectory_group_by_type activedirectory_group_count activedirectory_group_directory_roles activedirectory_group_input activedirectory_group_members_attached activedirectory_group_members_attached_count activedirectory_group_overview activedirectory_group_owners activedirectory_group_type activedirectory_group_with_no_member activedirectory_group_with_no_members_count activedirectory_groups_for_activedirectory_user activedirectory_groups_for_user activedirectory_microsoft_365_group_count activedirectory_security_group_count activedirectory_subscription_roles_for_user activedirectory_user_1_year_count activedirectory_user_24_hours_count activedirectory_user_30_90_days_count activedirectory_user_30_days_count activedirectory_user_90_365_days_count activedirectory_user_age_table activedirectory_user_by_creation_month activedirectory_user_by_tenant activedirectory_user_by_user_type activedirectory_user_count activedirectory_user_input activedirectory_user_overview activedirectory_user_sign_in_report activedirectory_user_type activedirectory_user_with_custom_role_count activedirectory_users_for_activedirectory_group api_management_for_network_public_ip api_management_for_network_subnet app_service_web_app_by_ftp_state app_service_web_app_by_http_logging app_service_web_app_by_kind app_service_web_app_by_network_traffic_protocol app_service_web_app_by_region app_service_web_app_by_resource_group app_service_web_app_by_state app_service_web_app_by_status app_service_web_app_by_subscription app_service_web_app_configuration app_service_web_app_count app_service_web_app_diagnostic_logs_configuration app_service_web_app_ftps_state app_service_web_app_http_logging app_service_web_app_http_logging_count app_service_web_app_https app_service_web_app_https_disabled_count app_service_web_app_input app_service_web_app_ip_security_restrictions app_service_web_app_kind app_service_web_app_offline_count app_service_web_app_overview app_service_web_app_state app_service_web_app_tags app_service_web_app_tls_version app_service_web_apps_for_network_subnet azure_compute_virtual_machine_egress_access azure_key_vault_private_link_enabled_count azure_network_private_ip azure_network_public_ip_ddos_settings_protected_ip azure_sql_database_edition batch_accounts_for_storage_account child_cosmosdb_account_for_cosmosdb_account child_cosmosdb_restorable_database_account_for_cosmosdb_account compute_disk_1_year_count compute_disk_24_hours_count compute_disk_30_90_days_count compute_disk_30_days_count compute_disk_90_365_days_count compute_disk_accesses_for_compute_disk compute_disk_accesses_for_compute_snapshot compute_disk_age_table compute_disk_associated_virtual_machine_details compute_disk_by_age compute_disk_by_attachment compute_disk_by_encryption_type compute_disk_by_os_type compute_disk_by_region compute_disk_by_resource_group compute_disk_by_sku_tier compute_disk_by_subscription compute_disk_cmk_and_platfrom_managed_encryption_count compute_disk_count compute_disk_customer_managed_encryption_count compute_disk_encryption_details compute_disk_encryption_report compute_disk_encryption_set_details compute_disk_encryption_sets_for_compute_disk compute_disk_encryption_sets_for_compute_snapshot compute_disk_encryption_sets_for_key_vault_key compute_disk_encryption_sets_for_kubernetes_cluster compute_disk_input compute_disk_network_access_policy compute_disk_os_type compute_disk_overview compute_disk_platform_managed_encryption_count compute_disk_size compute_disk_sku_name compute_disk_status compute_disk_storage_by_age compute_disk_storage_by_region compute_disk_storage_by_resource_group compute_disk_storage_by_subscription compute_disk_storage_total compute_disk_tags compute_disk_top_10_read_ops_avg compute_disk_top_10_write_ops_avg compute_disk_unattached_count compute_disks_for_compute_virtual_machine compute_disks_for_compute_virtual_machine_scale_set_vm compute_disks_for_storage_account compute_images_for_compute_virtual_machine compute_public_virtual_machine_count compute_snapshot_1_year_count compute_snapshot_24_hours_count compute_snapshot_30_90_days_count compute_snapshot_30_days_count compute_snapshot_90_365_days_count compute_snapshot_age_table compute_snapshot_by_encryption_type compute_snapshot_by_network_access_policy_status compute_snapshot_by_os_type compute_snapshot_by_region compute_snapshot_by_resource_group compute_snapshot_by_subscription compute_snapshot_count compute_snapshot_create_option compute_snapshot_encryption_setting_collection_disabled_count compute_snapshot_encryption_setting_collection_status compute_snapshot_incremental compute_snapshot_incremental_disabled_count compute_snapshot_incremental_status compute_snapshot_input compute_snapshot_network_access_policy compute_snapshot_overview compute_snapshot_sku_name compute_snapshot_source_details compute_snapshot_storage_total compute_snapshot_tags compute_snapshot_unrestricted_network_access_count compute_snapshots_for_compute_disk compute_snapshots_for_storage_account compute_virtual_machine_by_attachment_to_network compute_virtual_machine_by_cpu_utilization_category compute_virtual_machine_by_disaster_recovery_status compute_virtual_machine_by_host_encryption_status compute_virtual_machine_by_os_type compute_virtual_machine_by_public_ip compute_virtual_machine_by_region compute_virtual_machine_by_remote_access compute_virtual_machine_by_resource_group compute_virtual_machine_by_size compute_virtual_machine_by_subscription compute_virtual_machine_by_vulnerability_assessment_solution compute_virtual_machine_count compute_virtual_machine_data_disks compute_virtual_machine_disaster_recovery_disabled_count compute_virtual_machine_disaster_recovery_status compute_virtual_machine_encryption_status compute_virtual_machine_guest_configuration_assignments compute_virtual_machine_host_encryption_count compute_virtual_machine_image compute_virtual_machine_ingress_access compute_virtual_machine_input compute_virtual_machine_network_interfaces compute_virtual_machine_overview compute_virtual_machine_scale_set_by_host_encryption_status compute_virtual_machine_scale_set_by_log_analytics_agent_installed_status compute_virtual_machine_scale_set_by_logging_status compute_virtual_machine_scale_set_by_region compute_virtual_machine_scale_set_by_resource_group compute_virtual_machine_scale_set_by_subscription compute_virtual_machine_scale_set_by_tier compute_virtual_machine_scale_set_count compute_virtual_machine_scale_set_data_disks compute_virtual_machine_scale_set_encryption_status compute_virtual_machine_scale_set_host_encryption_count compute_virtual_machine_scale_set_image_reference compute_virtual_machine_scale_set_input compute_virtual_machine_scale_set_log_analytics_agent compute_virtual_machine_scale_set_log_analytics_agent_installed_count compute_virtual_machine_scale_set_logging_disabled compute_virtual_machine_scale_set_logging_status compute_virtual_machine_scale_set_network_interface compute_virtual_machine_scale_set_network_interfaces_for_network_load_balancer compute_virtual_machine_scale_set_os_disks compute_virtual_machine_scale_set_overview compute_virtual_machine_scale_set_scale_set_name compute_virtual_machine_scale_set_sku compute_virtual_machine_scale_set_sku_name compute_virtual_machine_scale_set_status compute_virtual_machine_scale_set_tags compute_virtual_machine_scale_set_vm_data_disks compute_virtual_machine_scale_set_vm_image_reference compute_virtual_machine_scale_set_vm_input compute_virtual_machine_scale_set_vm_network_interface compute_virtual_machine_scale_set_vm_os_disks compute_virtual_machine_scale_set_vm_overview compute_virtual_machine_scale_set_vm_tags compute_virtual_machine_scale_set_vms_for_compute_virtual_machine_scale_set compute_virtual_machine_scale_set_vms_for_kubernetes_cluster compute_virtual_machine_scale_set_vms_for_network_load_balancer compute_virtual_machine_scale_sets_for_compute_virtual_machine_scale_set_vm compute_virtual_machine_scale_sets_for_kubernetes_cluster compute_virtual_machine_scale_sets_for_network_load_balancer compute_virtual_machine_security_groups compute_virtual_machine_status compute_virtual_machine_storage_profile compute_virtual_machine_tags compute_virtual_machine_top10_cpu_past_week compute_virtual_machine_unattached_with_network_count compute_virtual_machine_unrestricted_remote_access_count compute_virtual_machine_vulnerability_assessment_disabled_count compute_virtual_machine_vulnerability_assessment_solution compute_virtual_machines_for_compute_disk compute_virtual_machines_for_network_interface compute_virtual_machines_for_network_load_balancer compute_virtual_machines_for_network_public_ip compute_virtual_machines_for_network_security_group compute_virtual_machines_for_network_virtual_network container_registries_for_key_vault_key cosmosdb_account_automatic_failover cosmosdb_account_automatic_failover_disabled_count cosmosdb_account_automatic_failover_status cosmosdb_account_backup_policy cosmosdb_account_by_encryption_type cosmosdb_account_by_kind cosmosdb_account_by_region cosmosdb_account_by_resource_group cosmosdb_account_by_subscription cosmosdb_account_capabilities cosmosdb_account_consistency_policy cosmosdb_account_cors_rules cosmosdb_account_count cosmosdb_account_customer_managed_encryption_count cosmosdb_account_database_count cosmosdb_account_database_details cosmosdb_account_default_encrypted_servers_count cosmosdb_account_encryption cosmosdb_account_encryption_details cosmosdb_account_encryption_report cosmosdb_account_failover_policy cosmosdb_account_firewall_policies cosmosdb_account_for_cosmosdb_mongo_database cosmosdb_account_ids_for_network_subnet cosmosdb_account_input cosmosdb_account_overview cosmosdb_account_private_endpoint_connection cosmosdb_account_private_link cosmosdb_account_private_link_disabled_count cosmosdb_account_private_link_status cosmosdb_account_public_access cosmosdb_account_public_count cosmosdb_account_public_status cosmosdb_account_tags cosmosdb_account_virtual_network_rules cosmosdb_mongo_collection_for_cosmosdb_mongo_database cosmosdb_mongo_database_account_details cosmosdb_mongo_database_collection_count cosmosdb_mongo_database_collection_details cosmosdb_mongo_database_for_cosmosdb_account cosmosdb_mongo_database_input cosmosdb_mongo_database_overview cosmosdb_mongo_database_tags cosmosdb_mongo_database_throughput cosmosdb_mongo_database_throughput_settings cosmosdb_sql_database_for_cosmosdb_account eventhub_namespaces_for_key_vault_key key_vault_access_policies key_vault_by_public_network_access_status key_vault_by_purge_protection_status key_vault_by_region key_vault_by_resource_group key_vault_by_sku key_vault_by_soft_delete_status key_vault_by_subscription key_vault_count key_vault_input key_vault_key_1_year_count key_vault_key_24_hours_count key_vault_key_30_90_days_count key_vault_key_30_days_count key_vault_key_90_365_days_count key_vault_key_age key_vault_key_age_table key_vault_key_by_creation_month key_vault_key_by_enabled_status key_vault_key_by_key_expiration_status key_vault_key_by_recovery_level key_vault_key_by_region key_vault_key_by_resource_group key_vault_key_by_size key_vault_key_by_subscription key_vault_key_by_type key_vault_key_count key_vault_key_enabled_count key_vault_key_expiration_set_count key_vault_key_input key_vault_key_overview key_vault_key_size key_vault_key_status key_vault_key_tags key_vault_key_type key_vault_keys_for_compute_disk key_vault_keys_for_compute_snapshot key_vault_keys_for_cosmosdb_account key_vault_keys_for_key_vault key_vault_keys_for_sql_server key_vault_keys_for_storage_account key_vault_network_acls key_vault_overview key_vault_public_network_access_enabled key_vault_public_network_access_enabled_count key_vault_purge_protection_enabled_count key_vault_purge_protection_status key_vault_sku key_vault_soft_delete_enabled_count key_vault_soft_delete_retention_in_days key_vault_soft_delete_status key_vault_tags key_vault_usage key_vault_vaults_for_compute_disk key_vault_vaults_for_compute_snapshot key_vault_vaults_for_cosmosdb_account key_vault_vaults_for_key_vault_key key_vault_vaults_for_sql_server key_vault_vaults_for_storage_account kubernetes_cluster_agent_pools kubernetes_cluster_auto_scaler_profile_disabled_count kubernetes_cluster_auto_scaler_profile_status kubernetes_cluster_by_kubernetes_version kubernetes_cluster_by_region kubernetes_cluster_by_resource_group kubernetes_cluster_by_sku_name kubernetes_cluster_by_subscription kubernetes_cluster_count kubernetes_cluster_disk_by_encryption_status kubernetes_cluster_disk_encryption_details kubernetes_cluster_disk_encryption_status kubernetes_cluster_disk_public_status kubernetes_cluster_disk_unencrypted_count kubernetes_cluster_input kubernetes_cluster_node_pool_count kubernetes_cluster_overview kubernetes_cluster_pod_security_policy_disabled_count kubernetes_cluster_pod_security_policy_status kubernetes_cluster_public_access_disabled_count kubernetes_cluster_public_access_status kubernetes_cluster_rbac_disabled_count kubernetes_cluster_rbac_status kubernetes_cluster_status kubernetes_cluster_tags kubernetes_cluster_version kubernetes_clusters_for_compute_virtual_machine_scale_set load_balancer_associated_resources load_balancer_frontend_ip_configurations load_balancer_inbound_nat_rules load_balancer_load_balancing_rules load_balancer_outbound_rules load_balancer_probe monitor_diagnostic_settings_for_storage_account monitor_log_profiles_for_storage_account mssql_elasticpool_for_sql_database mssql_elasticpool_for_sql_server network_application_gateways_for_app_service_web network_application_gateways_for_compute_virtual_machine network_application_gateways_for_compute_virtual_machine_scale_set network_application_gateways_for_network_subnet network_application_gateways_for_network_virtual_network network_express_route_circuit_allow_classic_operations network_express_route_circuit_by_peerings network_express_route_circuit_by_provisioning_state network_express_route_circuit_by_region network_express_route_circuit_by_service_provider_provisioning_state network_express_route_circuit_by_sku_tier network_express_route_circuit_by_subscription network_express_route_circuit_count network_express_route_circuit_global_reach network_express_route_circuit_input network_express_route_circuit_no_peerings_count network_express_route_circuit_overview network_express_route_circuit_peering_count network_express_route_circuit_peerings network_express_route_circuit_peerings_primary network_express_route_circuit_peerings_secondary network_express_route_circuit_service_provider network_express_route_circuit_service_provider_properties network_express_route_circuit_sku_details network_express_route_circuit_sku_name network_express_route_circuit_tags network_firewall_input network_firewall_ip_configurations network_firewall_overview network_firewall_sku_name network_firewall_sku_tier network_firewall_tags network_firewall_threat_intel_mode network_firewalls_for_network_public_ip network_firewalls_for_network_subnet network_interface_accelerated_networking_enabled network_interface_attached_nsg network_interface_attached_virtual_machine network_interface_input network_interface_ip_configurations_details network_interface_ip_forwarding_enabled network_interface_overview network_interface_private_ip_address network_interface_public_ip_address network_interface_tags network_interfaces_for_compute_virtual_machine_scale_set_vm network_load_balancer_backend_address_pools_for_compute_virtual_machine network_load_balancer_backend_address_pools_for_compute_virtual_machine_scale_set network_load_balancer_backend_address_pools_for_compute_virtual_machine_scale_set_vm network_load_balancer_backend_address_pools_for_network_load_balancer network_load_balancer_backend_address_pools_for_network_virtual_network network_load_balancer_backend_pool_count network_load_balancer_backend_pools network_load_balancer_input network_load_balancer_overview network_load_balancer_rules_count network_load_balancer_sku_name network_load_balancer_sku_tier network_load_balancer_tags network_load_balancers_for_compute_virtual_machine network_load_balancers_for_compute_virtual_machine_scale_set network_load_balancers_for_compute_virtual_machine_scale_set_vm network_load_balancers_for_network_public_ip network_load_balancers_for_network_virtual_network network_load_nat_rules_count network_load_probes_count network_nat_gateways_for_network_subnet network_nat_gateways_for_network_virtual_network network_network_interfaces_for_compute_virtual_machine network_network_interfaces_for_compute_virtual_machine_scale_set network_network_interfaces_for_network_load_balancer network_network_interfaces_for_network_public_ip network_network_interfaces_for_network_security_group network_public_association network_public_ip_address network_public_ip_association_details network_public_ip_input network_public_ip_overview network_public_ip_sku_name network_public_ip_tags network_public_ips_for_compute_virtual_machine network_public_ips_for_network_firewall network_public_ips_for_network_interface network_public_ips_for_network_load_balancer network_route_tables_for_network_subnet network_route_tables_for_network_virtual_network network_security_group_assoc network_security_group_attached_enis_count network_security_group_attached_subnets_count network_security_group_by_provisioning_state network_security_group_by_region network_security_group_by_resource_group network_security_group_by_subscription network_security_group_count network_security_group_egress_rule_sankey network_security_group_egress_rules network_security_group_egress_rules_count network_security_group_flow_logs_disabled_count network_security_group_flow_logs_status network_security_group_ingress_rule_sankey network_security_group_ingress_rules network_security_group_ingress_rules_count network_security_group_input network_security_group_overview network_security_group_tags network_security_group_unassociated_count network_security_group_unrestricted_egress network_security_group_unrestricted_egress_count network_security_group_unrestricted_egress_remote_access network_security_group_unrestricted_ingress network_security_group_unrestricted_ingress_count network_security_group_unrestricted_ingress_remote_access network_security_group_unused_status network_security_groups_for_compute_virtual_machine network_security_groups_for_compute_virtual_machine_scale_set network_security_groups_for_compute_virtual_machine_scale_set_vm network_security_groups_for_network_interface network_security_groups_for_network_subnet network_security_groups_for_network_virtual_network network_subnet_address_prefix network_subnet_association network_subnet_input network_subnet_num_ips network_subnet_overview network_subnets_for_app_service_web network_subnets_for_compute_virtual_machine network_subnets_for_compute_virtual_machine_scale_set network_subnets_for_compute_virtual_machine_scale_set_vm network_subnets_for_cosmosdb_account network_subnets_for_key_vault network_subnets_for_network_firewall network_subnets_for_network_interface network_subnets_for_network_security_group network_subnets_for_network_virtual_network network_subnets_for_sql_server network_subnets_for_storage_account network_virtual_networks_for_app_service_web network_virtual_networks_for_compute_virtual_machine network_virtual_networks_for_compute_virtual_machine_scale_set network_virtual_networks_for_compute_virtual_machine_scale_set_vm network_virtual_networks_for_cosmosdb_account network_virtual_networks_for_key_vault network_virtual_networks_for_network_firewall network_virtual_networks_for_network_interface network_virtual_networks_for_network_load_balancer network_virtual_networks_for_network_security_group network_virtual_networks_for_network_subnet network_virtual_networks_for_sql_server network_virtual_networks_for_storage_account parent_cosmosdb_account_for_cosmosdb_account parent_cosmosdb_restorable_database_account_for_cosmosdb_account postgresql_servers_for_key_vault_key resource_group_role_definitions_for_activedirectory_group resource_group_role_definitions_for_activedirectory_user resource_groups_for_activedirectory_group resource_groups_for_activedirectory_user security_group_flow_logs servicebus_namespaces_for_key_vault_key source_compute_disks_for_compute_disk source_compute_disks_for_compute_snapshot source_compute_snapshots_for_compute_snapshot sql_database_1_year_count sql_database_24_hours_count sql_database_30_90_days_count sql_database_30_days_count sql_database_90_365_days_count sql_database_age_table sql_database_by_creation_month sql_database_by_edition sql_database_by_region sql_database_by_resource_group sql_database_by_status sql_database_by_subscription sql_database_count sql_database_geo_redundant_backup_disabled_count sql_database_geo_redundant_backup_enabled sql_database_geo_redundant_backup_status sql_database_input sql_database_overview sql_database_retention sql_database_server sql_database_status sql_database_tags sql_database_tde_status sql_database_transparent_data_encryption sql_database_transparent_data_encryption_disabled_count sql_database_vulnerability_assessment sql_database_vulnerability_assessment_disabled_count sql_database_vulnerability_assessment_enabled sql_database_vulnerability_assessment_status sql_database_zone_redundant sql_databases_for_sql_server sql_server_ad_authentication_enabled sql_server_ad_authentication_status sql_server_audit_policy sql_server_auditing_disabled_count sql_server_auditing_enabled sql_server_auditing_status sql_server_azure_ad_authentication_disabled_count sql_server_by_encryption_type sql_server_by_kind sql_server_by_region sql_server_by_resource_group sql_server_by_state sql_server_by_subscription sql_server_count sql_server_customer_managed_encryption_count sql_server_default_encrypted_servers_count sql_server_encryption sql_server_encryption_report sql_server_firewall_rule sql_server_input sql_server_overview sql_server_private_endpoint_connection sql_server_private_link_status sql_server_public_count sql_server_public_network_access sql_server_public_status sql_server_state sql_server_tags sql_server_version sql_server_virtual_network_rules sql_server_vulnerability_assessment sql_server_vulnerability_assessment_disabled_count sql_server_vulnerability_assessment_enabled sql_server_vulnerability_assessment_status sql_servers_for_key_vault_key sql_servers_for_network_subnet sql_servers_for_network_virtual_network sql_servers_for_sql_database storage_account_1_year_count storage_account_24_hours_count storage_account_30_90_days_count storage_account_30_days_count storage_account_90_365_days_count storage_account_access_tier storage_account_age_table storage_account_blob_configurations storage_account_blob_encryption_service storage_account_blob_logging storage_account_blob_public_access storage_account_blob_public_access_enabled_count storage_account_blob_public_access_status storage_account_blob_soft_delete storage_account_blob_soft_delete_disabled_count storage_account_blob_soft_delete_status storage_account_by_access_tier storage_account_by_region storage_account_by_resource_group storage_account_count storage_account_file_encryption_service storage_account_https_traffic storage_account_https_traffic_disabled_count storage_account_https_traffic_status storage_account_infrastructure_encryption_disabled_count storage_account_infrastructure_encryption_status storage_account_input storage_account_kind storage_account_network_access_status storage_account_overview storage_account_queue_logging storage_account_sku storage_account_tags storage_account_unrestricted_network_access_count storage_account_virtual_network_rules storage_storage_accounts_for_compute_disk storage_storage_accounts_for_key_vault_key storage_storage_accounts_for_network_subnet subscription_count subscription_role_definitions_for_activedirectory_group subscription_role_definitions_for_activedirectory_user subscription_table subscriptions_for_activedirectory_group subscriptions_for_activedirectory_user target_activedirectory_groups_for_activedirectory_group target_compute_disks_for_compute_snapshot target_compute_snapshots_for_compute_snapshot torage_account_by_subscription virtual_network_address_prefixes virtual_network_by_provisioning_state virtual_network_by_region virtual_network_by_resource_group virtual_network_by_subscription virtual_network_count virtual_network_ddos_protection virtual_network_ddos_protection_enabled virtual_network_ddos_protection_status virtual_network_egress_rule_sankey virtual_network_ingress_rule_sankey virtual_network_input virtual_network_nsg virtual_network_num_ips virtual_network_overview virtual_network_peering_connection virtual_network_route_tables virtual_network_routes virtual_network_subnet_details virtual_network_subnets_count virtual_network_tags

Query: key_vault_public_network_access_enabled

Usage

powerpipe query azure_insights.query.key_vault_public_network_access_enabled

Steampipe Tables

azure_key_vault

Azure plugin

SQL

select
  'Public Access' as label,
  case when network_acls is null or network_acls ->> 'defaultAction' != 'Deny' then 'Enabled' else 'Disabled' end as value,
  case when network_acls is null or network_acls ->> 'defaultAction' != 'Deny' then 'alert' else 'ok' end as type
from
  azure_key_vault
where
  lower(id) = $1
  and subscription_id = split_part($1, '/', 3);

Dashboards

The query is used in the dashboards:

Azure Key Vault Detail