Query: Azure DDoS Protection Standard should be enabled

Description

DDoS protection standard should be enabled for all virtual networks with a subnet that is part of an application gateway with a public IP.

Query

Tables used in this query:

• azure_application_gateway
• azure_subscription
• azure_virtual_network

Controls using this query:

• 8.5 Ensure Azure DDoS Network Protection is enabled on virtual networks
• Azure DDoS Protection Standard should be enabled

SQL