Control: Ensure that 'Allow Blob Anonymous Access' is set to 'Disabled' for storage accounts
Description
Disable anonymous access to blob containers and disallow blob public access on storage account.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.storage_account_blob_public_access_disabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.storage_account_blob_public_access_disabled --shareSQL
This control uses a named query:
select sa.id as resource, case when not sa.allow_blob_public_access then 'ok' else 'alarm' end as status, case when not sa.allow_blob_public_access then sa.name || ' blob public access disabled.' else sa.name || ' blob public access enabled.' end as reason , sa.resource_group as resource_group , sub.display_name as subscriptionfrom azure_storage_account sa left join azure_subscription sub on sub.subscription_id = sa.subscription_id;