compliance.tf
Azure Compliance ControlsAzure Data Factory

Data factories should use a GitHub repository

Checks each Azure Data Factory instance for a configured source control repository. A factory without a repository configuration in its `repoConfiguration` settings is reported as non-compliant, and one with a repository is compliant.

What this control checks

Azure Policy 77d40665-3120-4348-b539-3192ec808307 flags Microsoft.DataFactory/factories when repoConfiguration.repositoryName does not exist or equals an empty string. Checkov CKV_AZURE_103 checks azurerm_data_factory and passes when github_configuration has a repository_name. Checkov CKV_AZURE_103 also passes when vsts_configuration has a repository_name, and otherwise returns FAILED. Powerpipe data_factory_uses_git_repository returns 'ok' when repo_configuration ->> 'repositoryName' is not null, and 'alarm' otherwise.

Tool mappings

Use these identifiers to cross-reference this control across tools, reports, and evidence.

  • Compliance.tf Control: data_factory_uses_git_repository
  • Checkov Check: CKV_AZURE_103
  • Powerpipe Control: azure_compliance.control.data_factory_uses_git_repository
  • Azure Policy Definition: 77d40665-3120-4348-b539-3192ec808307

Last reviewed: 2026-10-11

View all Azure controls →

On this page

Ask AI about this

Help improve this page