turbot/steampipe-mod-azure-compliance

Control: Event Grid topics identity provider should be enabled

Description

Ensure that managed identity provider is enabled for the Event Grid Topic. This control is non-compliant if Event Grid topic identity provider is disabled.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.eventgrid_topic_identity_provider_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.eventgrid_topic_identity_provider_enabled --share

SQL

This control uses a named query:

select
a.id as resource,
case
when identity ->> 'type' = 'None' then 'alarm'
else 'ok'
end as status,
case
when identity ->> 'type' = 'None' then a.name || ' identity provider disabled.'
else a.name || ' identity provider enabled.'
end as reason
, a.resource_group as resource_group
, sub.display_name as subscription
from
azure_eventgrid_topic a,
azure_subscription sub;

Tags