turbot/steampipe-mod-terraform-azure-compliance

Control: API Management backends should use HTTPS

Description

This control checks that the API Management backend is configured to use HTTPS.

Usage

Run the control in your terminal:

powerpipe control run terraform_azure_compliance.control.apimanagement_backend_uses_https

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_azure_compliance.control.apimanagement_backend_uses_https --share

SQL

This control uses a named query:

select
address as resource,
case
when (attributes_std ->> 'url') like 'https%' then 'ok'
else 'alarm'
end status,
split_part(address, '.', 2) || case
when (attributes_std ->> 'url') like 'https%' then ' backend uses HTTPS'
else ' backend does not use HTTPS'
end || '.' reason
, path || ':' || start_line
from
terraform_resource
where
type = 'azurerm_api_management_backend';

Tags