feat(query): implements "Beta - Recovery Services Vault With Public Network Access"

[cx-andre-pereira]

Reason for Proposed Changes

• Currently there is no query to ensure that resources of type "azurerm_recovery_services_vault" set the "public_network_access_enabled" field to false.

• Quoting CIS_Microsoft_Azure_Storage_Services_Benchmark_v1.0.0 page 94: "Disable public network access on Recovery Services vaults to prevent exposure to the internet and reduce the risk of unauthorized access. Use private endpoints and Azure Role-Based Access Control (RBAC) to securely manage access within trusted networks." and "Disabling public network access improves security by ensuring that a Recovery Services vault is not exposed on the public internet.".

Proposed Changes

• Implemented the missing query.
• The query will flag any "azurerm_recovery_services_vault" resource that sets "public_network_access_enabled" to true, or do not set the field since it is enabled by default.

I submit this contribution under the Apache-2.0 license.

[github-actions]

KICS version: v2.1.13

Category Results CRITICAL 0 HIGH 0 MEDIUM 0 LOW 0 INFO 0 TRACE 0 TOTAL 0	Metric Values Files scanned 1 Files parsed 1 Files failed to scan 0 Total executed queries 47 Queries failed to execute 0 Execution time 0