Container Instance container groups should have an identity provider enabled
Ensure that managed identity provider is enabled for the container instance container group. This control is non-compliant if container instance container group identity provider is disabled. Azure Container Group should have managed identity enabled.
Azure Container Group should have managed identity enabled.
What this control checks
Container Instance container groups must have an identity provider enabled
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.container_instance_container_group_identity_provider_enabled.
Scans of the Terraform code that flag the same setting before deployment: Checkov check CKV2_AZURE_28; KICS query "Beta - Container Group Managed Identity Disabled" (02f0e3e7-2550-4d75-a23b-ab5254a3ebeb).
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
container_instance_container_group_identity_provider_enabled - Checkov Check:
CKV2_AZURE_28 - Powerpipe Control:
azure_compliance.control.container_instance_container_group_identity_provider_enabled - KICS Query:
02f0e3e7-2550-4d75-a23b-ab5254a3ebeb
Last reviewed: 2026-10-11