Azure Compliance ControlsAzure Virtual Network
Network security groups should limit outbound access from the internet
Network security group provide stateful filtering of inbound/outbound network traffic to Azure resources. It is recommended that no network security group allows unrestricted outbound access.
What this control checks
Network security groups should restrict outbound access from internet.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
network_security_group_outbound_access_restricted - Powerpipe Control:
azure_compliance.control.network_security_group_outbound_access_restricted
Last reviewed: 2026-10-13