Azure Compliance ControlsAzure Monitor
Application Insights components should prohibit log ingestion and querying from public networks
When public access is disabled on an Application Insights component, only networks connected through `private link` can ingest and query the logs of the component. The restriction applies to both log ingestion and log querying.
What this control checks
Application Insights components should prohibit log ingestion and querying from public networks
Framework mappings
The clauses this control is mapped to in each framework.
- 3.1.g Trails
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
application_insights_block_log_ingestion_and_querying_from_public - Powerpipe Control:
azure_compliance.control.application_insights_block_log_ingestion_and_querying_from_public
Last reviewed: 2026-10-10