Benchmark: Public Network Access
This benchmark answers the following questions:
- Is SQL servers public network access enabled?
- Is Storage account public network access enabled?
- Is Cosmos DB account public network access enabled?
- Is Container Registry public network access enabled?
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-azure-perimeterStart the Powerpipe server:
steampipe service startpowerpipe serverOpen http://localhost:9033 in your browser and select Public Network Access.
Run this benchmark in your terminal:
powerpipe benchmark run azure_perimeter.benchmark.public_network_accessSnapshot and share results via Turbot Pipes:
powerpipe benchmark run azure_perimeter.benchmark.public_network_access --shareControls
- Container registries should restrict public network access
- Cosmos DB accounts should restrict public network access
- SQL servers should restrict public network access
- Storage accounts should restrict public network access