Azure Compliance ControlsAzure Data Factory
Data factories should have public network access disabled
Disabling public network access improves security by ensuring that your Data Factory is not exposed on the public internet. Azure Data Factory can then only be accessed from a private endpoint. The check looks at `publicNetworkAccess` on Data Factory.
What this control checks
Data Factory publicNetworkAccess must be Disabled; Enabled fails.
Framework mappings
The clauses this control is mapped to in each framework.
- 2.2.1.1 Ensure public network access is Disabled
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
data_factory_public_network_access_disabled - Checkov Check:
CKV_AZURE_104 - Powerpipe Control:
azure_compliance.control.data_factory_public_network_access_disabled - Azure Policy Definitions:
08b1442b-7789-4130-8506-4f99a97226a7,1cf164be-6819-4a50-b8fa-4bcaa4f98fb6 - Trivy Check:
AZU-0035
Last reviewed: 2026-10-11