Query: Virtual machines' Guest Configuration extension should be deployed with system-assigned managed identity

Description

The Guest Configuration extension requires a system assigned managed identity. Azure virtual machines in the scope of this policy will be non-compliant when they have the Guest Configuration extension installed but do not have a system assigned managed identity.

Query

Tables used in this query:

• azure_compute_virtual_machine
• azure_subscription

Controls using this query:

• Virtual machines' Guest Configuration extension should be deployed with system-assigned managed identity

SQL