turbot/steampipe-mod-azure-compliance

Control: Container instance container groups identity provider should be enabled

Description

Ensure that managed identity provider is enabled for the container instance container group. This control is non-compliant if container instance container group identity provider is disabled.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.container_instance_container_group_identity_provider_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.container_instance_container_group_identity_provider_enabled --share

SQL

This control uses a named query:

select
cg.id as resource,
case
when identity is null then 'alarm'
else 'ok'
end as status,
case
when identity is null then cg.name || ' identity provider disabled.'
else cg.name || ' identity provider enabled.'
end as reason
, cg.resource_group as resource_group
, sub.display_name as subscription
from
azure_container_group as cg,
azure_subscription as sub
where
sub.subscription_id = cg.subscription_id;

Tags