turbot/steampipe-mod-azure-compliance

Control: Event Grid domains identity provider should be enabled

Description

Ensure that managed identity provider is enabled for Event Grid Domain. This control is non-compliant if Event Grid domain identity provider is disabled.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.eventgrid_domain_identity_provider_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.eventgrid_domain_identity_provider_enabled --share

SQL

This control uses a named query:

select
a.id as resource,
case
when identity_type = 'None' then 'alarm'
else 'ok'
end as status,
case
when identity_type = 'None' then a.name || ' identity provider disabled.'
else a.name || ' identity provider enabled.'
end as reason
, a.resource_group as resource_group
, sub.display_name as subscription
from
azure_eventgrid_domain a,
azure_subscription sub;

Tags