Control: Cognitive Services accounts should have local authentication methods disabled
Description
Disabling local authentication methods improves security by ensuring that Cognitive Services accounts require Azure Active Directory identities exclusively for authentication.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.cognitive_service_local_auth_disabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.cognitive_service_local_auth_disabled --shareSQL
This control uses a named query:
select a.id as resource, case when disable_local_auth then 'ok' else 'alarm' end as status, case when disable_local_auth then a.name || ' account local authentication enabled.' else a.name || ' account local authentication disabled.' end as reason , a.resource_group as resource_group , sub.display_name as subscriptionfrom azure_cognitive_account a, azure_subscription sub;