Control: Network Watcher should be enabled
Description
Network Watcher is a regional service that enables you to monitor and diagnose conditions at a network scenario level in, to, and from Azure. Scenario level monitoring enables you to diagnose problems at an end to end network level view. It is required to have a network watcher resource group to be created in every region where a virtual network is present. An alert is enabled if a network watcher resource group is not available in a particular region.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.network_watcher_enabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.network_watcher_enabled --shareSQL
This control uses a named query:
select loc.id resource, case when watcher.id is null then 'alarm' else 'ok' end as status, case when watcher.id is null then 'Network watcher not enabled in ' || loc.name || '.' else 'Network watcher enabled in ' || loc.name || '.' end as reason, loc.name , sub.display_name as subscriptionfrom azure_location loc left join azure_network_watcher watcher on watcher.region = loc.name join azure_subscription sub on sub.subscription_id = loc.subscription_id;