💼 6.1.6 Ensure that 'Public Network Access' for Ingestion and Queries is 'Disabled' for Log Analytics Workspaces (Automated)
- ID:
/frameworks/cis-azure-v7.0.0/06/01/06
Stats
not available
Description
A Log Analytics workspace accepts ingestion and queries from any network, or only from networks connected through an Azure Monitor Private Link Scope (AMPLS). The Allow public network access for ingestion and Allow public network access for queries settings select between them; each is Enabled (Yes), Disabled (No), or SecuredByPerimeter. Prerequisites: Link the workspace to an Azure Monitor Private Link Scope reached through a private endpoint with private DNS from every network whose agents, clients, or users send data to or query it.
Similar
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|
Policies (1)
| Policy | Logic Count | Flags | Compliance |
|---|---|---|---|
| 🛡️ Azure Log Analytics Workspace public network access is not disabled🟢 | 1 | 🟢 x6 | no data |