Control: Azure > CIS v5.0 > 7 - Networking Services > 7.11 - Ensure subnets are associated with network security groups

Configures auditing against a CIS Benchmark item.

Level: 1

Protect subnet resources by ensuring subnets are associated with network security groups, which can filter inbound and outbound traffic using security rules

Unprotected subnets can expose resources to unauthorized access.

Resource Types

This control targets the following resource types:

Azure > Network > Subnet

Policies

This control type relies on these other policies when running actions:

In Your Workspace

Developers

Control Type URI

tmod:@turbot/azure-cisv5-0#/control/types/r0711

Category URI

tmod:@turbot/cis#/control/categories/v070904

GraphQL

query controlType(id: "tmod:@turbot/azure-cisv5-0#/control/types/r0711") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/azure-cisv5-0#/control/types/r0711'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/azure-cisv5-0#/control/types/r0711"