Control: Ensure that Microsoft Defender for Cloud Apps (MCAS) Integration with Microsoft Defender for Cloud is selected

powerpipe control run azure_compliance.control.securitycenter_mcas_integration

powerpipe login
powerpipe control run azure_compliance.control.securitycenter_mcas_integration --share

select
  sc_sett.id as resource,
  case
    when enabled then 'ok'
    else 'alarm'
  end as status,
  case
    when enabled then 'Windows Defender ATP (WDATP) integrated with Security Center.'
    else 'Windows Defender ATP (WDATP) not integrated with Security Center.'
  end as reason
  
  , sub.display_name as subscription
from
  azure_security_center_setting sc_sett
  right join azure_subscription sub on sc_sett.subscription_id = sub.subscription_id
where
  name = 'MCAS';