---
names:
  full: Azure Databricks Workspace is not deployed in a customer-managed virtual network (VNet)
  contextual: Workspace is not deployed in a customer-managed virtual network (VNet)
description: >
  Deploy Azure Databricks Workspaces using customer-managed Virtual Network 
  injection so that compute clusters and control-plane components reside securely 
  within your organization's network perimeter. The default Databricks-managed 
  VNet offers only limited control over network security policies, firewall 
  configurations and routing.
type: COMPLIANCE_POLICY
categories:
  - SECURITY
frameworkMappings:
  - "/frameworks/cis-azure-v5.0.0/02/01/01"
  - "/frameworks/cloudaware/resource-security/secure-access"