Control: Azure > Cognitive Services > Account > Firewall

Determine the firewall settings required for Azure > Cognitive Services > Account.

The Firewall control governs the account's networkAcls.defaultAction: Allow all networks (defaultAction = Allow) or Allow only approved virtual networks and IP ranges (defaultAction = Deny). When set to an Enforce value, a non-compliant account is remediated in place by updating networkAcls.defaultAction; existing IP and virtual-network allow-rules are preserved.

Resource Types

This control targets the following resource types:

Azure > Cognitive Services > Account

Policies

The following policies can be used to configure this control:

Azure > Cognitive Services > Account > Firewall

Permissions

Cloud permissions used by this control and its actions:

microsoft.cognitiveservices/accounts/write

In Your Workspace

Developers

Control Type URI

tmod:@turbot/azure-cognitiveservices#/control/types/accountFirewall

Category URI

tmod:@turbot/turbot#/control/categories/security

GraphQL

query controlType(id: "tmod:@turbot/azure-cognitiveservices#/control/types/accountFirewall") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/azure-cognitiveservices#/control/types/accountFirewall'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/azure-cognitiveservices#/control/types/accountFirewall"