Control: Azure Cognitive Search services should disable public network access
Description
Disabling public network access improves security by ensuring that your Azure Cognitive Search service is not exposed on the public internet. Creating private endpoints can limit exposure of your Search service.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.search_service_public_network_access_disabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.search_service_public_network_access_disabled --shareSQL
This control uses a named query:
select s.id as resource, case when public_network_access = 'Enabled' then 'alarm' else 'ok' end as status, case when public_network_access = 'Enabled' then name || ' public network access enabled.' else name || ' public network access disabled.' end as reason , s.resource_group as resource_group , sub.display_name as subscriptionfrom azure_search_service as s left join azure_subscription sub on s.subscription_id = sub.subscription_id;