Control: Azure > CIS v5.0 > 7 - Networking Services > 7.16 - Ensure Azure Network Security Perimeter is used to secure Azure platform-as-a-service resources

Configures auditing against a CIS Benchmark item.

Level: 2

Azure Network Security Perimeter creates a logical boundary around Azure platform-asa-service (PaaS) resources outside of virtual networks. By default, the network security perimeter denies public access to associated PaaS resources, with the ability to define explicit rules for inbound and outbound traffic.

While an automated assessment procedure exists for this recommendation, the assessment status remains manual. Determining appropriate network security perimeter profiles and resource assignments depends on the context and requirements of each organization and environment.

Network security perimeter denies public access to PaaS resources, reducing exposure and mitigating data exfiltration risks.