Application Insights components should prohibit log ingestion and querying from public networks
When public access is disabled on an Application Insights component, only networks connected through `private link` can ingest and query the logs of the component. The restriction applies to both log ingestion and log querying.
Only private-link connected networks will be able to ingest and query logs of this component.
What this control checks
Application Insights components should prohibit log ingestion and querying from public networks
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.application_insights_block_log_ingestion_and_querying_from_public.
Framework-specific interpretation
NIST Cybersecurity Framework v2.0: Mapped to PR.PS-04 (Log records are generated and made available for continuous monitoring.).
Framework mappings
The clauses this control is mapped to in each framework.
- 3.1.g Trails
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
application_insights_block_log_ingestion_and_querying_from_public - Powerpipe Control:
azure_compliance.control.application_insights_block_log_ingestion_and_querying_from_public
Last reviewed: 2026-10-10