azure_compliance

Azure Compliance

This policy denies if a gateway subnet is configured with a network security group. Assigning a network security group to a gateway subnet will cause the gateway to stop functioning.

network_security_group_subnet_associated

hipaa_hitrust_v92_0805_01m1organizational

0805.01m1Organizational.12-01.m 01.04 Network Access Control

hipaa_hitrust_v92_0806_01m2organizational

0806.01m2Organizational.12356-01.m 01.04 Network Access Control

hipaa_hitrust_v92_0809_01n2organizational

0809.01n2Organizational.1234-01.n 01.04 Network Access Control

hipaa_hitrust_v92_0810_01n2organizational

0810.01n2Organizational.5-01.n 01.04 Network Access Control

hipaa_hitrust_v92_0811_01n2organizational

0811.01n2Organizational.6-01.n 01.04 Network Access Control

hipaa_hitrust_v92_0812_01n2organizational

0812.01n2Organizational.8-01.n 01.04 Network Access Control

hipaa_hitrust_v92_0814_01n1organizational

0814.01n1Organizational.12-01.n 01.04 Network Access Control

hipaa_hitrust_v92_0894_01m2organizational

0894.01m2Organizational.7-01.m 01.04 Network Access Control

nist_sp_800_171_rev_2_3_1_3

3.1.3 Control the flow of CUI in accordance with approved authorizations

nist_sp_800_171_rev_2_3_13_1

3.13.1 Monitor, control, and protect communications (i.e., information transmitted or received by organizational systems) at the external boundaries and key internal boundaries of organizational systems

nist_sp_800_171_rev_2_3_13_2

3.13.2 Employ architectural designs, software development techniques, and systems engineering principles that promote effective information security within organizational systems

nist_sp_800_171_rev_2_3_13_5

3.13.5 Implement subnetworks for publicly accessible system components that are physically or logically separated from internal networks

nist_sp_800_171_rev_2_3_13_6

3.13.6 Deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception)

nist_sp_800_53_rev_5_sc_7_3

Access Points SC-7(3)

fedramp_high_sc_7

Boundary Protection (SC-7)

nist_sp_800_53_rev_5_sc_7

nist_sp_800_53_rev_5_ac_4

Information Flow Enforcement (AC-4)

fedramp_high_ac_4

all_controls_network

Network

rbi_itf_nbfc_v2017_is_audit_5

Policy for Information System Audit (IS Audit)-5

fedramp_high_sc_7_3

SC-7(3) Access Points

Subnets should be associated with a Network Security Group

azure

azuread

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, HIPAA HITRUST, NIST, PCI DSS across all your Azure subscriptions using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-azure-compliance

Control: Subnets should be associated with a Network Security Group

Description

Usage

SQL

Tags