Benchmark: Limit
Description
The number of tags on each resource should be monitored to avoid hitting the limit unexpectedly.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-azure-tagsStart the Powerpipe server:
steampipe service startpowerpipe serverOpen http://localhost:9033 in your browser and select Limit.
Run this benchmark in your terminal:
powerpipe benchmark run azure_tags.benchmark.limitSnapshot and share results via Turbot Pipes:
powerpipe benchmark run azure_tags.benchmark.limit --shareControls
- API Management services should not exceed tag limit
- App Service environments should not exceed tag limit
- App Service function apps should not exceed tag limit
- App Service plans should not exceed tag limit
- App Service web apps should not exceed tag limit
- Application security groups should not exceed tag limit
- Batch accounts should not exceed tag limit
- Compute availability sets should not exceed tag limit
- Compute disk encryption sets should not exceed tag limit
- Compute disks should not exceed tag limit
- Compute images should not exceed tag limit
- Compute snapshots should not exceed tag limit
- Compute virtual machine scale sets should not exceed tag limit
- Compute virtual machines should not exceed tag limit
- Container registries should not exceed tag limit
- CosmosDB accounts should not exceed tag limit
- CosmosDB mongo databases should not exceed tag limit
- CosmosDB sql databases should not exceed tag limit
- Data factories should not exceed tag limit
- Data Lake analytics accounts should not exceed tag limit
- Data Lake stores should not exceed tag limit
- Event Hub namespaces should not exceed tag limit
- ExpressRoute circuits should not exceed tag limit
- Firewalls should not exceed tag limit
- IoT Hubs should not exceed tag limit
- Key vault deleted vaults should not exceed tag limit
- Key vault keys should not exceed tag limit
- Key vault managed hardware security modules should not exceed tag limit
- Key vault secrets should not exceed tag limit
- Key vaults should not exceed tag limit
- Kubernetes clusters should not exceed tag limit
- Load balancers should not exceed tag limit
- Log alerts should not exceed tag limit
- Log profiles should not exceed tag limit
- Logic app workflows should not exceed tag limit
- MariaDB servers should not exceed tag limit
- Microsoft SQL elasticpools should not exceed tag limit
- Microsoft SQL managed instances should not exceed tag limit
- MySQL servers should not exceed tag limit
- Network interfaces should not exceed tag limit
- Network security groups should not exceed tag limit
- Network watcher flow logs should not exceed tag limit
- Network watchers should not exceed tag limit
- PostgreSQL servers should not exceed tag limit
- Public IPs should not exceed tag limit
- Recovery services vaults should not exceed tag limit
- Redis caches should not exceed tag limit
- Resource groups should not exceed tag limit
- Route tables should not exceed tag limit
- Search services should not exceed tag limit
- Service Bus namespaces should not exceed tag limit
- SQL databases should not exceed tag limit
- SQL servers should not exceed tag limit
- Storage accounts should not exceed tag limit
- Stream Analytics jobs should not exceed tag limit
- Virtual network gateways should not exceed tag limit
- Virtual networks should not exceed tag limit