Policy: Azure > Virtual Desktop > Host Pool > Public Network Access

Define the Public Network Access settings required for Azure > Virtual Desktop > Host Pool.

The Public Network Access policy determines whether the public network access for Azure Virtual Desktop host pool should be Enabled, Disabled, EnabledForClientsOnly or EnabledForSessionHostsOnly.

When public network access is disabled, the host pool can only be accessed through private endpoints or specific access configurations. This provides enhanced security by preventing public internet access to the host pool.

Targets

This policy targets the following resource types:

Azure > Virtual Desktop > Host Pool

Controls

Setting this policy configures this control:

Azure > Virtual Desktop > Host Pool > Public Network Access

Policy Specification

Schema Type	`string`
Default	`Skip`
Valid Values [YAML]	`Skip` `Check: Enabled` `Check: Disabled` `Check: EnabledForClientsOnly` `Check: EnabledForSessionHostsOnly` `Enforce: Enabled` `Enforce: Disabled` `Enforce: EnabledForClientsOnly` `Enforce: EnabledForSessionHostsOnly`
Examples [YAML]	`Check: Enabled`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/security

Policy Type URI

tmod:@turbot/azure-virtualdesktop#/policy/types/hostPoolPublicNetworkAccess

GraphQL

query policyType(id: "tmod:@turbot/azure-virtualdesktop#/policy/types/hostPoolPublicNetworkAccess") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/azure-virtualdesktop#/policy/types/hostPoolPublicNetworkAccess'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/azure-virtualdesktop#/policy/types/hostPoolPublicNetworkAccess'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/azure-virtualdesktop#/policy/types/hostPoolPublicNetworkAccess"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/azure-virtualdesktop#/policy/types/hostPoolPublicNetworkAccess"