turbot/azure_compliance
Loading controls...

Control: All network ports should be restricted on network security groups associated to your virtual machine

Description

Azure Security Center has identified some of your network security groups' inbound rules to be too permissive. Inbound rules should not allow access from 'Any' or 'Internet' ranges. This can potentially enable attackers to target your resources.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.compute_vm_remote_access_restricted_all_ports

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.compute_vm_remote_access_restricted_all_ports --share

SQL

This control uses a named query:

compute_vm_remote_access_restricted_all_ports

Tags