turbot/azure_compliance
Loading controls...

Control: Add system-assigned managed identity to enable Guest Configuration assignments on virtual machines with no identities

Description

This policy adds a system-assigned managed identity to virtual machines hosted in Azure that are supported by Guest Configuration but do not have any managed identities. A system-assigned managed identity is a prerequisite for all Guest Configuration assignments and must be added to machines before using any Guest Configuration policy definitions.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.compute_vm_guest_configuration_with_no_managed_identity

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.compute_vm_guest_configuration_with_no_managed_identity --share

SQL

This control uses a named query:

compute_vm_guest_configuration_with_no_managed_identity

Tags