standard
turbot/azure_compliance

Trigger: Detect & correct Compute disks with public access enabled

Detect Compute disks with public access enabled then disable public access.

Query

select
concat(id, ' [', subscription_id, '/', resource_group, ']') as title,
name,
resource_group,
subscription_id,
_ctx ->> 'connection_name' as conn
from
azure_compute_disk
where
network_access_policy not in ('DenyAll', 'AllowPrivate')
and public_network_access = 'Enabled';

Schedule

15m

Tags

category = Compliance
plugin = azure
service = Azure/Compute