Benchmark: Mandatory
Description
Resources should all have a standard set of tags applied for functions like resource organization, automation, cost control, and access control.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-azure-tags
Start the Powerpipe server:
steampipe service startpowerpipe server
Open http://localhost:9033 in your browser and select Mandatory.
Run this benchmark in your terminal:
powerpipe benchmark run azure_tags.benchmark.mandatory
Snapshot and share results via Turbot Pipes:
powerpipe benchmark run azure_tags.benchmark.mandatory --share
Controls
- API Management services should have mandatory tags
- App Service environments should have mandatory tags
- App Service function apps should have mandatory tags
- App Service plans should have mandatory tags
- App Service web apps should have mandatory tags
- Application security groups should have mandatory tags
- Batch accounts should have mandatory tags
- Compute availability sets should have mandatory tags
- Compute disk encryption sets should have mandatory tags
- Compute disks should have mandatory tags
- Compute images should have mandatory tags
- Compute snapshots should have mandatory tags
- Compute virtual machines should have mandatory tags
- Compute virtual machine scale sets should have mandatory tags
- Container registries should have mandatory tags
- CosmosDB accounts should have mandatory tags
- CosmosDB mongo databases should have mandatory tags
- CosmosDB sql databases should have mandatory tags
- Data factories should have mandatory tags
- Data lake analytics accounts should have mandatory tags
- Data lake stores should have mandatory tags
- Event Hub namespaces should have mandatory tags
- ExpressRoute circuits should have mandatory tags
- Firewalls should have mandatory tags
- IoT Hubs should have mandatory tags
- Key vault deleted vaults should have mandatory tags
- Key vault keys should have mandatory tags
- Key vault managed hardware security modules should have mandatory tags
- Key vaults should have mandatory tags
- Key vault secrets should have mandatory tags
- Kubernetes clusters should have mandatory tags
- Load balancers should have mandatory tags
- Log alerts should have mandatory tags
- Log profiles should have mandatory tags
- Logic app workflows should have mandatory tags
- MariaDB servers should have mandatory tags
- Microsoft SQL elasticpools should have mandatory tags
- Microsoft SQL managed instances should have mandatory tags
- MySQL servers should have mandatory tags
- Network interfaces should have mandatory tags
- Network security groups should have mandatory tags
- Network watcher flow logs should have mandatory tags
- Network watchers should have mandatory tags
- PostgreSQL servers should have mandatory tags
- Public IPs should have mandatory tags
- Recovery services vaults should have mandatory tags
- Redis caches should have mandatory tags
- Resource groups should have mandatory tags
- Route tables should have mandatory tags
- Search services should have mandatory tags
- Service Bus namespaces should have mandatory tags
- SQL databases should have mandatory tags
- SQL servers should have mandatory tags
- Storage accounts should have mandatory tags
- Stream Analytics jobs should have mandatory tags
- Virtual network gateways should have mandatory tags
- Virtual networks should have mandatory tags