Control: Virtual machines should disable password authentication
Description
Virtual machines should disable password authentication to prevent brute-force attacks.
Usage
Run the control in your terminal:
powerpipe control run terraform_azure_compliance.control.compute_vm_disable_password_authenticationSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_azure_compliance.control.compute_vm_disable_password_authentication --shareSQL
This control uses a named query:
select  address as resource,  case    when (attributes_std -> 'os_profile_linux_config' ->> 'disable_password_authentication')::boolean then 'ok'    else 'alarm'  end status,  split_part(address, '.', 2) || case    when (attributes_std -> 'os_profile_linux_config' ->> 'disable_password_authentication')::boolean then ' disable password authentication'    else ' enable password authentication'  end || '.' reason    , path || ':' || start_linefrom  terraform_resourcewhere  type = 'azurerm_virtual_machine';