Control: Microsoft Defender for Containers should be enabled

powerpipe control run azure_compliance.control.securitycenter_azure_defender_on_for_containers

powerpipe login
powerpipe control run azure_compliance.control.securitycenter_azure_defender_on_for_containers --share

select
  sub_pricing.id as resource,
  case
    when pricing_tier = 'Standard' then 'ok'
    else 'alarm'
  end as status,
  case
    when pricing_tier = 'Standard' then 'Azure Defender on for Containers.'
    else 'Azure Defender off for Containers.'
  end as reason
  
  , sub.display_name as subscription
from
  azure_security_center_subscription_pricing sub_pricing
  right join azure_subscription sub on sub_pricing.subscription_id = sub.subscription_id
where
  name = 'Containers';