turbot/steampipe-mod-azure-perimeter

Control: Storage containers should prohibit public access

Description

Storage containers should have their public access level set to 'None' to prevent unauthorized access.

Usage

Run the control in your terminal:

powerpipe control run azure_perimeter.control.storage_container_prohibit_public_access

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_perimeter.control.storage_container_prohibit_public_access --share

Steampipe Tables

SQL

select
c.id as resource,
case
when c.public_access = 'None' then 'ok'
else 'alarm'
end as status,
case
when c.public_access = 'None' then c.name || ' prohibits public access.'
when c.public_access = 'Blob' then c.name || ' allows public blob access.'
when c.public_access = 'Container' then c.name || ' allows full public container access.'
end as reason
, c.resource_group as resource_group
, sub.display_name as subscription
from
azure_storage_container c,
azure_subscription sub
where
sub.subscription_id = c.subscription_id;

Tags