turbot/azure_compliance
Loading controls...

Control: Add system-assigned managed identity to enable Guest Configuration assignments on VMs with a user-assigned identity

Description

This policy adds a system-assigned managed identity to virtual machines hosted in Azure that are supported by Guest Configuration and have at least one user-assigned identity but do not have a system-assigned managed identity. A system-assigned managed identity is a prerequisite for all Guest Configuration assignments and must be added to machines before using any Guest Configuration policy definitions.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.compute_vm_guest_configuration_with_user_and_system_assigned_managed_identity

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.compute_vm_guest_configuration_with_user_and_system_assigned_managed_identity --share

SQL

This control uses a named query:

compute_vm_guest_configuration_with_user_and_system_assigned_managed_identity

Tags