turbot/steampipe-mod-azure-compliance

Control: Function apps should have remote debugging turned off

Description

Remote debugging requires inbound ports to be opened on function apps. Remote debugging should be turned off.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.appservice_function_app_remote_debugging_disabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.appservice_function_app_remote_debugging_disabled --share

SQL

This control uses a named query:

select
app.id as resource,
case
when configuration -> 'properties' ->> 'remoteDebuggingEnabled' = 'false' then 'ok'
else 'alarm'
end as status,
case
when configuration -> 'properties' ->> 'remoteDebuggingEnabled' = 'false' then name || ' remote debugging disabled.'
else name || ' remote debugging enabled.'
end as reason
, app.resource_group as resource_group
, sub.display_name as subscription
from
azure_app_service_function_app as app,
azure_subscription as sub
where
sub.subscription_id = app.subscription_id;

Tags