Control: Storage containers should prohibit public access
Description
Storage containers should have their public access level set to 'None' to prevent unauthorized access.
Usage
Run the control in your terminal:
powerpipe control run azure_perimeter.control.storage_container_prohibit_public_access
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_perimeter.control.storage_container_prohibit_public_access --share
Steampipe Tables
SQL
select c.id as resource, case when c.public_access = 'None' then 'ok' else 'alarm' end as status, case when c.public_access = 'None' then c.name || ' prohibits public access.' when c.public_access = 'Blob' then c.name || ' allows public blob access.' when c.public_access = 'Container' then c.name || ' allows full public container access.' end as reason , c.resource_group as resource_group , sub.display_name as subscriptionfrom azure_storage_container c, azure_subscription subwhere sub.subscription_id = c.subscription_id;