Control: Container registries quarantine policy should be enabled
Description
Ensure container registry quarantine policy is enabled. This control is non-compliant if quarantine policy is disabled.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.container_registry_quarantine_policy_enabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.container_registry_quarantine_policy_enabled --shareSQL
This control uses a named query:
select distinct a.name as resource, case when policies -> 'quarantinePolicy' ->> 'status' = 'enabled' then 'ok' else 'alarm' end as status, case when policies -> 'quarantinePolicy' ->> 'status' = 'enabled' then a.name || ' quarantine policy enabled.' else a.name || ' quarantine policy disabled.' end as reason , a.resource_group as resource_group , sub.display_name as subscriptionfrom azure_container_registry as a, azure_subscription as subwhere sub.subscription_id = a.subscription_id;