Control: 2.2.1.1 Ensure public network access is Disabled

Overview

Disable public network access to prevent exposure to the internet and reduce the risk of unauthorized access. Use private endpoints to securely manage access within trusted networks.

Disabling public network access improves security by ensuring that a service is not exposed on the public internet.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.cis_v400_2_2_1_1

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.cis_v400_2_2_1_1 --share

SQL

This control uses a named query:

select
  s.id as resource,
  case
    when public_network_access = 'Enabled' then 'alarm'
    else 'ok'
  end as status,
  case
    when public_network_access = 'Enabled' then name || ' public network access enabled.'
    else name || ' public network access disabled.'
  end as reason
  
  , s.resource_group as resource_group
  , sub.display_name as subscription
from
  azure_sql_server as s,
  azure_subscription as sub
where
  sub.subscription_id = s.subscription_id;

Control: 2.2.1.1 Ensure public network access is Disabled

Overview

Usage

SQL

Tags