Turbot Guardrails Hub 
Hub
Mods
Azure
45
Mods
139
Resource Types
2,961
Policies
1,527
Controls
103
Quick Actions
101
IAM

Policy: Azure > CIS v4.0 > 02 - Common Reference Recommendations > 02.02 - Networking > 02.02.01 - Virtual Networks (VNets) > 02.02.01.02 - Ensure Network Access Rules are set to Deny-by-default

Configures auditing against a CIS Benchmark item.

Level: 1

Network access rules should be configured to deny access by default and only allow access from trusted networks. This reduces the attack surface by preventing unauthorized access from unknown networks.

This is a cross-cutting control that applies to multiple Azure services including Cognitive Services, Compute Disks, Container Registry, Service Bus, and Storage Accounts.

Targets

This policy targets the following resource types:

Primary Policy

This policy is used with the following primary policy:

Controls

Setting this policy configures this control:

Policy Specification

Schema Type
string
Default
Per Azure > CIS v4.0 > 02 - Common Reference Recommendations > 02.02.01 - Virtual Networks
Valid Values [YAML]
  • >-
  Per Azure > CIS v4.0 > 02 - Common Reference Recommendations > 02.02.01 -
  Virtual Networks

  • Skip

  • Check: Benchmark using attestation

Category

In Your Workspace

Developers