turbot/azure_compliance

Query: recovery_service_vault_uses_managed_identity

Usage

powerpipe query azure_compliance.query.recovery_service_vault_uses_managed_identity

SQL

select
s.id as resource,
case
when identity is null
or identity ->> 'type' = 'None' then 'alarm'
else 'ok'
end as status,
case
when identity is null
or identity ->> 'type' = 'None' then name || ' not uses managed identity.'
else name || ' uses managed identity.'
end as reason,
s.resource_group as resource_group,
sub.display_name as subscription
from
azure_recovery_services_vault as s,
azure_subscription as sub
where
sub.subscription_id = s.subscription_id;

Controls

The query is being used by the following controls: