turbot/steampipe-mod-azure-compliance

Control: Ensure that 'Allow Blob Anonymous Access' is set to 'Disabled' for storage accounts

Description

Disable anonymous access to blob containers and disallow blob public access on storage account.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.storage_account_blob_public_access_disabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.storage_account_blob_public_access_disabled --share

SQL

This control uses a named query:

select
sa.id as resource,
case
when not sa.allow_blob_public_access then 'ok'
else 'alarm'
end as status,
case
when not sa.allow_blob_public_access then sa.name || ' blob public access disabled.'
else sa.name || ' blob public access enabled.'
end as reason
, sa.resource_group as resource_group
, sub.display_name as subscription
from
azure_storage_account sa,
azure_subscription sub
where
sub.subscription_id = sa.subscription_id;

Tags