Azure Compliance ControlsAzure Container Instances
Container Instance container groups should have an identity provider enabled
Ensure that managed identity provider is enabled for the container instance container group. This control is non-compliant if container instance container group identity provider is disabled. Azure Container Group should have managed identity enabled.
What this control checks
Container Instance container groups must have an identity provider enabled
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
container_instance_container_group_identity_provider_enabled - Checkov Check:
CKV2_AZURE_28 - Powerpipe Control:
azure_compliance.control.container_instance_container_group_identity_provider_enabled - KICS Query:
02f0e3e7-2550-4d75-a23b-ab5254a3ebeb
Last reviewed: 2026-10-11