Control: Container instance container groups identity provider should be enabled
Description
Ensure that managed identity provider is enabled for the container instance container group. This control is non-compliant if container instance container group identity provider is disabled.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.container_instance_container_group_identity_provider_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.container_instance_container_group_identity_provider_enabled --share
SQL
This control uses a named query:
select cg.id as resource, case when identity is null then 'alarm' else 'ok' end as status, case when identity is null then cg.name || ' identity provider disabled.' else cg.name || ' identity provider enabled.' end as reason , cg.resource_group as resource_group , sub.display_name as subscriptionfrom azure_container_group as cg, azure_subscription as subwhere sub.subscription_id = cg.subscription_id;