Azure Compliance ControlsAzure Event Grid
Event Grid domains should have public network access restrictions configured
Ensure that Event Grid Domain public network access is disabled. This control is non-compliant if Event Grid domains have public network access enabled. Disabling it keeps the resource from being exposed on the public internet.
What this control checks
Event Grid domains must have public network access disabled; Enabled fails.
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
eventgrid_domain_restrict_public_access - Checkov Check:
CKV_AZURE_106 - Powerpipe Controls:
azure_compliance.control.eventgrid_domain_private_link_used,azure_compliance.control.eventgrid_domain_restrict_public_access - Azure Policy Definitions:
898e9824-104c-4965-8e0e-5197588fa5d4,f8f774be-6aee-492a-9e29-486ef81f3a68
Last reviewed: 2026-10-11