Control: Azure Cosmos DB accounts should have firewall rules
Description
Firewall rules should be defined on your Azure Cosmos DB accounts to prevent traffic from unauthorized sources. Accounts that have at least one IP rule defined with the virtual network filter enabled are deemed compliant. Accounts disabling public access are also deemed compliant.
Usage
Run the control in your terminal:
powerpipe control run terraform_azure_compliance.control.cosmosdb_account_with_firewall_rules
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_azure_compliance.control.cosmosdb_account_with_firewall_rules --share
SQL
This control uses a named query:
cosmosdb_account_with_firewall_rules