Control: Public network access should be disabled for storage accounts
Description
Disabling public network access for a storage account helps prevent unauthorized access from the public internet.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.storage_account_public_network_access_disabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.storage_account_public_network_access_disabled --shareSQL
This control uses a named query:
select sa.id as resource, case when public_network_access = 'Disabled' then 'ok' else 'alarm' end as status, case when public_network_access = 'Disabled' then sa.name || ' public network access is disabled.' else sa.name || ' public network access is enabled.' end as reason , sa.resource_group as resource_group , sub.display_name as subscriptionfrom azure_storage_account sa left join azure_subscription sub on sub.subscription_id = sa.subscription_id;