Cognitive Search services should use managed identity
Cognitive Search services should use a managed identity for enhanced authentication security. Checkov CKV_AZURE_207 checks that the Azure Cognitive Search service uses managed identities to access Azure resources.
Cognitive Search can use managed identities to authenticate to Azure resource without storing credentials. Azure automatically generates tokens and performs rotation.
What this control checks
Cognitive Search services should use a managed identity
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.search_service_uses_managed_identity.
Scans of the Terraform code that flag the same setting before deployment: Checkov check CKV_AZURE_207.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
search_service_uses_managed_identity - Checkov Check:
CKV_AZURE_207 - Powerpipe Control:
azure_compliance.control.search_service_uses_managed_identity
Last reviewed: 2026-10-14