Control: Azure > Compute > Disk > Data Access Authentication Mode

Define the data access authentication mode required for Azure > Compute > Disk.

The Data Access Authentication Mode control compares each disk's mode with Azure > Compute > Disk > Data Access Authentication Mode, raises an alarm when they differ and, when set to Enforce, updates the disk.

While a disk has an active export or upload URL, Azure refuses the change, so the control stays in alarm and enforces once access to the disk ends.

Resource Types

This control targets the following resource types:

Azure > Compute > Disk

Policies

The following policies can be used to configure this control:

Azure > Compute > Disk > Data Access Authentication Mode

Permissions

Cloud permissions used by this control and its actions:

microsoft.compute/disks/write

In Your Workspace

Developers

Control Type URI

tmod:@turbot/azure-compute#/control/types/diskDataAccessAuthenticationMode

Category URI

tmod:@turbot/turbot#/control/categories/security

GraphQL

query controlType(id: "tmod:@turbot/azure-compute#/control/types/diskDataAccessAuthenticationMode") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/azure-compute#/control/types/diskDataAccessAuthenticationMode'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/azure-compute#/control/types/diskDataAccessAuthenticationMode"