Azure Compliance ControlsAzure Arc
Windows Azure Arc machines should have the Log Analytics extension installed
This policy audits Windows Azure Arc machines if the Log Analytics agent is not installed. The powerpipe check is titled "Log Analytics extension should be installed on your Windows Azure Arc machines".
What this control checks
Windows Azure Arc machines must have the Log Analytics extension installed.
Framework mappings
The clauses this control is mapped to in each framework.
- AU-6(4) Central Review And Analysis
- AU-6(5) Central Review And Analysis
- AU-12 Audit Record Generation
- AU-12(1) System-Wide And Time-Correlated Audit Trial
- SI-4: System Monitoring
- 3.3.1: Create and retain system audit logs and records to the extent needed to enable the monitoring, analysis, investigation, and reporting of unlawful or unauthorized system activity
- 3.3.2 Ensure that the actions of individual system users can be uniquely traced to those users, so they can be held accountable for their actions
- 3.14.6 Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks
- 3.14.7: Identify unauthorized use of organizational systems.
- AU-6(4) Central Review And Analysis
- AU-6(5) Integration / Scanning And Monitoring Capabilities
- AU-12 Audit Generation
- AU-12(1) System-Wide / Time-Correlated Audit Trail
- SI-4 Information System Monitoring
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
arc_compute_machine_windows_log_analytics_agent_installed - Powerpipe Control:
azure_compliance.control.arc_compute_machine_windows_log_analytics_agent_installed
Last reviewed: 2026-10-11