Forum Discussion
Need assistance w generating a KQL query to identify settings in Azure
Hello, I need assistance generating a KQL query to identify: 1. Storage accounts that have "Enabled from all networks" set under Public network access under "Firewalls and virtual networks". ...
UPDATE:
For #1 I use this query and get back a list that shows publicNetworkAccessstatus "Enabled".
resources
| where type == "microsoft.storage/storageaccounts"
| project name,publicNetworkAccessstatus = "Enabled"
However drilling down into each account, some show "Enabled from selected virtual networks & IP addresses". How can I tweak the query to show only items "Enabled from all networks"? What am I missing?
For #1 I use this query and get back a list that shows publicNetworkAccessstatus "Enabled".
resources
| where type == "microsoft.storage/storageaccounts"
| project name,publicNetworkAccessstatus = "Enabled"
However drilling down into each account, some show "Enabled from selected virtual networks & IP addresses". How can I tweak the query to show only items "Enabled from all networks"? What am I missing?