turbot/steampipe-mod-azure-compliance

Control: Ensure That Microsoft Defender for Azure Cosmos DB is set to 'On'

Description

Microsoft Defender for Azure Cosmos DB scans all incoming network requests for threats to your Azure Cosmos DB resources.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.securitycenter_azure_defender_on_for_cosmosdb

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.securitycenter_azure_defender_on_for_cosmosdb --share

SQL

This control uses a named query:

select
sub_pricing.id as resource,
case
when pricing_tier = 'Standard' then 'ok'
else 'alarm'
end as status,
case
when pricing_tier = 'Standard' then 'Azure Defender on for Cosmos DB.'
else 'Azure Defender off for Cosmos DB.'
end as reason
, sub.display_name as subscription
from
azure_security_center_subscription_pricing sub_pricing
right join azure_subscription sub on sub_pricing.subscription_id = sub.subscription_id
where
name = 'CosmosDbs';

Tags