Azure Compliance ControlsAzure Virtual Machines
Virtual machines should be in an approved virtual network
This policy audits any virtual machine connected to a virtual network that is not approved. The Azure Policy rule checks network interfaces whose ipconfigurations subnet id does not match the approved virtual network Id.
What this control checks
Audits any virtual machine connected to a virtual network that is not approved.
Framework mappings
The clauses this control is mapped to in each framework.
- 0805.01m1Organizational.12-01.m 01.04 Network Access Control
- 0806.01m2Organizational.12356-01.m 01.04 Network Access Control
- 0809.01n2Organizational.1234-01.n 01.04 Network Access Control
- 0810.01n2Organizational.5-01.n 01.04 Network Access Control
- 0811.01n2Organizational.6-01.n 01.04 Network Access Control
3 more clauses
- 0812.01n2Organizational.8-01.n 01.04 Network Access Control
- 0814.01n1Organizational.12-01.n 01.04 Network Access Control
- 0894.01m2Organizational.7-01.m 01.04 Network Access Control
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
compute_vm_attached_with_network - Powerpipe Control:
azure_compliance.control.compute_vm_attached_with_network - Azure Policy Definition:
d416745a-506c-48b6-8ab1-83cb814bcaa3
Last reviewed: 2026-10-11