Control: Event Grid domains should restrict public network access
Description
Ensure that Event Grid Domain public network access is disabled. This control is non-compliant if Event Grid domains have public network access enabled.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.eventgrid_domain_restrict_public_accessSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.eventgrid_domain_restrict_public_access --shareSQL
This control uses a named query:
select a.id as resource, case when public_network_access = 'Enabled' then 'alarm' else 'ok' end as status, case when public_network_access = 'Enabled' then a.name || ' publicly accessible.' else a.name || ' not publicly accessible.' end as reason , a.resource_group as resource_group , sub.display_name as subscriptionfrom azure_eventgrid_domain a, azure_subscription sub;