Policy: Azure > Bot Service > Bot > Public Network Access

Define the Public Network Access settings required for Azure > Bot Service > Bot.

This policy determines whether public network access is permitted for an Azure Bot Service bot. When public network access is disabled, the bot can only be accessed through private endpoints, providing enhanced security by preventing public internet access to the bot. When set to Check: Disabled or Check: Enabled, the control will go to an alarm state if the bot's setting does not match the policy. When set to Enforce: Disabled or Enforce: Enabled, the control will automatically configure the property to match the policy. Setting the policy to Skip will exclude the bot from this check.

Targets

This policy targets the following resource types:

Azure > Bot Service > Bot

Controls

Setting this policy configures this control:

Azure > Bot Service > Bot > Public Network Access

Policy Packs

This policy setting is used by the following policy packs:

Enforce Public Network Access Is Disabled for Azure Bot Service Bots

Policy Specification

Schema Type	`string`
Default	`Skip`
Valid Values [YAML]	`Skip` `Check: Enabled` `Check: Disabled` `Enforce: Enabled` `Enforce: Disabled`
Examples [YAML]	`Check: Disabled`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/security

Policy Type URI

tmod:@turbot/azure-botservice#/policy/types/botPublicNetworkAccess

GraphQL

query policyType(id: "tmod:@turbot/azure-botservice#/policy/types/botPublicNetworkAccess") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/azure-botservice#/policy/types/botPublicNetworkAccess'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/azure-botservice#/policy/types/botPublicNetworkAccess'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/azure-botservice#/policy/types/botPublicNetworkAccess"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/azure-botservice#/policy/types/botPublicNetworkAccess"