Azure Compliance ControlsAzure Databricks
Databricks workspaces should have 'No Public IP' set to 'Enabled'
Enable secure cluster connectivity (also known as no public IP) on Azure Databricks workspaces. Clusters do not have public IP addresses and communicate with the control plane over a secure connection.
What this control checks
Passes when the workspace's No Public IP setting is Enabled
Framework mappings
The clauses this control is mapped to in each framework.
- A.8.20 Network security
- 2.1.9 Ensure 'No Public IP' is set to 'Enabled'
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
databricks_workspace_no_public_ip_enabled - Powerpipe Control:
azure_compliance.control.databricks_workspace_no_public_ip_enabled - Prowler Check:
databricks_workspace_no_public_ip_enabled - Azure Policy Definition:
51c1490f-3319-459c-bbbc-7f391bbed753
Last reviewed: 2026-10-11