turbot/steampipe-mod-azure-compliance

Control: Automation account variables should be encrypted

Description

It is important to enable encryption of Automation account variable assets when storing sensitive data

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.automation_account_variable_encryption_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.automation_account_variable_encryption_enabled --share

SQL

This control uses a named query:

select
a.id as resource,
case
when is_encrypted then 'ok'
else 'alarm'
end as status,
case
when is_encrypted then a.title || ' encryption enabled.'
else a.title || ' encryption disabled.'
end as reason
, a.resource_group as resource_group
, sub.display_name as subscription
from
azure_automation_variable as a,
azure_subscription as sub;

Tags