Query: Authentication to Linux machines should require SSH keys

Description

Although SSH itself provides an encrypted connection, using passwords with SSH still leaves the VM vulnerable to brute-force attacks. The most secure option for authenticating to an Azure Linux virtual machine over SSH is with a public-private key pair, also known as SSH keys.

Query

Tables used in this query:

• azure_compute_virtual_machine
• azure_subscription

Controls using this query:

• Authentication to Linux machines should require SSH keys

SQL