turbot/terraform_azure_compliance

Query: container_registry_anonymous_pull_disabled

Usage

powerpipe query terraform_azure_compliance.query.container_registry_anonymous_pull_disabled

Steampipe Tables

SQL

select
address as resource,
case
when (attributes_std ->> 'sku') in ('Standard', 'Premium') and (attributes_std ->> 'anonymous_pull_enabled')::boolean then 'alarm'
else 'ok'
end status,
split_part(address, '.', 2) || case
when (attributes_std ->> 'sku') in ('Standard', 'Premium') and (attributes_std ->> 'anonymous_pull_enabled')::boolean then ' anonymous pull enabled'
else ' anonymous pull disabled'
end || '.' reason
, path || ':' || start_line
from
terraform_resource
where
type = 'azurerm_container_registry';

Controls

The query is being used by the following controls: