Azure Compliance ControlsAzure Databricks
Databricks subnets should have network security groups configured
Checks that Network Security Groups (`NSGs`) are implemented on Azure Databricks subnets to control inbound and outbound traffic. The check ensures only authorized communication is allowed to and from the workspace subnets.
What this control checks
Checks Databricks workspace subnets for an associated network security group
Framework mappings
The clauses this control is mapped to in each framework.
- 3.1.2 Ensure that network security groups are configured for Databricks subnets
- 2.1.2 Ensure that network security groups are configured for Databricks subnets
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
databricks_workspace_subnet_with_nsg_configured - Powerpipe Control:
azure_compliance.control.databricks_workspace_subnet_with_nsg_configured
Last reviewed: 2026-10-11