---
names:
  full: "Azure VM Scale Set Instance allows public access to SSH port"
  contextual: "Instance allows public access to SSH port"
description: >
  Ensure that Azure VM Scale Set Instances do not allow unrestricted public SSH (port 22) traffic.
categories:
  - "SECURITY"
type: "COMPLIANCE_POLICY"
frameworkMappings:
  - "/frameworks/iso-iec-27001-2013/13/01/01"
  - "/frameworks/iso-iec-27001-2022/05/14"
  - "/frameworks/pci-dss-v4.0.1/01/04/01"
  - "/frameworks/soc-2/cc6/01/08"
  - "/frameworks/soc-2/cc6/06/04"
  - "/frameworks/cloudaware/resource-security/network-exposure"
  - "/frameworks/hipaa-security-rules/164-312/e-01"
  - "/frameworks/iso-iec-27001-2013/09/01/02"
  - "/frameworks/pci-dss-v4.0.1/01/02/05"
  - "/frameworks/pci-dss-v4.0.1/01/02/06"
  - "/frameworks/pci-dss-v4.0.1/01/03/01"
  - "/frameworks/pci-dss-v4.0.1/01/03/02"
  - "/frameworks/pci-dss-v4.0.1/02/02/07"
  - "/frameworks/soc-2/cc6/01/03"
similarPolicies:
  internal:
    - dec-x-599c86b4