Control: Ensure that 'Allow Blob Anonymous Access' is set to 'Disabled' for storage accounts
Description
Disable anonymous access to blob containers and disallow blob public access on storage account.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.storage_account_blob_public_access_disabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.storage_account_blob_public_access_disabled --share
SQL
This control uses a named query:
select sa.id as resource, case when not sa.allow_blob_public_access then 'ok' else 'alarm' end as status, case when not sa.allow_blob_public_access then sa.name || ' blob public access disabled.' else sa.name || ' blob public access enabled.' end as reason , sa.resource_group as resource_group , sub.display_name as subscriptionfrom azure_storage_account sa, azure_subscription subwhere sub.subscription_id = sa.subscription_id;