turbot/azure_compliance

Query: monitor_logs_storage_container_insights_activity_logs_not_public_accessible

Usage

powerpipe query azure_compliance.query.monitor_logs_storage_container_insights_activity_logs_not_public_accessible

SQL

select
sc.id as resource,
case
when public_access != 'None' then 'alarm'
else 'ok'
end as status,
case
when public_access != 'None' then account_name || ' container insights-activity-logs storing activity logs publicly accessible.'
else account_name || ' container insights-activity-logs storing activity logs not publicly accessible.'
end as reason,
sc.resource_group as resource_group,
sub.display_name as subscription
from
azure_storage_container sc,
azure_subscription sub
where
name = 'insights-activity-logs'
and sub.subscription_id = sc.subscription_id;

Controls

The query is being used by the following controls: