Application Insights components should have a Log Analytics workspace configured for Azure Monitor Logs
Link the Application Insights component to a Log Analytics workspace for logs encryption. Linking to a workspace enabled with a customer-managed key ensures that Application Insights logs meet this compliance requirement.
Customer-managed keys are commonly required to meet regulatory compliance and for more control over the access to your data in Azure Monitor. Linking your component to a Log Analytics workspace that's enabled with a customer-managed key, ensures that your Application Insights logs meet this compliance requirement.
What this control checks
Application Insights components must have a Log Analytics workspace configured
Audit evidence
Evidence that deployed resources meet this control: Azure Policy compliance results for the built-in policy definition "Azure Monitor Logs for Application Insights should be linked to a Log Analytics workspace" (d550e854-df1a-4de9-bf44-cd894b39a95e); PowerPipe control azure_compliance.control.application_insights_linked_to_log_analytics_workspace.
Framework-specific interpretation
NIST Cybersecurity Framework v2.0: Mapped to PR.PS-04 (Log records are generated and made available for continuous monitoring.).
Framework mappings
The clauses this control is mapped to in each framework.
- 3.1.g Trails
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
application_insights_linked_to_log_analytics_workspace - Powerpipe Control:
azure_compliance.control.application_insights_linked_to_log_analytics_workspace - Azure Policy Definition:
d550e854-df1a-4de9-bf44-cd894b39a95e
Last reviewed: 2026-10-10