Policy: Azure > CIS v5.0 > 2 - Analytics Services > 2.01 - Azure Databricks > 2.01.02 - Ensure that network security groups are configured for Databricks subnets > Attestation

By setting this policy, you attest that you have manually verified that it complies with the relevant section of the CIS Benchmark.

Azure Console To verify NSG configuration for Databricks subnets: 1. From the Azure portal, navigate to your Databricks workspace 2. In the workspace settings, identify the VNet and subnets used 3. Navigate to Virtual Networks > [Your VNet] > Subnets 4. For both public and private subnets used by Databricks, verify that NSGs are attached 5. Review the NSG rules to ensure they allow necessary Databricks traffic while restricting unauthorized access

Once verified, enter the date that this attestation expires. Note that the date can not be further in the future than is specified in report level Maximum Attestation Duration policy. Set to a blank value to clear the attestation.