Azure Compliance ControlsAzure Virtual Machine Scale Sets
Virtual machine scale sets should be in a load balancer backend pool
Azure VM scale sets are associated with at least one load balancer backend pool. The evaluation looks for a backend pool link on each scale set's network configuration. Prowler rates the check medium severity.
What this control checks
Virtual machine scale sets should be in a load balancer backend pool
Framework mappings
The clauses this control is mapped to in each framework.
- PI-01.01AC The cloud service provider sets up an application firewall to protect the administration interfaces for cloud service customers that are accessible over public networks.
Related controls
- Virtual machines and virtual machine scale sets should have encryption at host enabled
- Windows Server virtual machines should have the default Microsoft IaaSAntimalware extension installed
- Virtual machines should use just-in-time network access control for management ports
- Azure subscriptions should have Microsoft Defender for Servers enabled
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
azure_vm_scaleset_associated_with_load_balancer - Prowler Check:
vm_scaleset_associated_with_load_balancer
Last reviewed: 2026-10-11