Control: Linux virtual machines scale sets should disable password authentication
Description
Linux virtual machines scale sets should disable password authentication to prevent brute-force attacks.
Usage
Run the control in your terminal:
powerpipe control run terraform_azure_compliance.control.compute_vm_scale_set_disable_password_authentication_linux
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_azure_compliance.control.compute_vm_scale_set_disable_password_authentication_linux --share
SQL
This control uses a named query:
select address as resource, case when (attributes_std ->> 'disable_password_authentication') = 'false' then 'alarm' else 'ok' end status, split_part(address, '.', 2) || case when (attributes_std ->> 'disable_password_authentication') = 'false' then ' password authentication enabled' else ' password authentication disabled' end || '.' reason , path || ':' || start_linefrom terraform_resourcewhere type = 'azurerm_linux_virtual_machine_scale_set';