Azure Compliance ControlsAzure Virtual Network
Network security groups should limit inbound TCP port 5432 access from the internet
Network security group provide stateful filtering of inbound/outbound network traffic to Azure resources. It is recommended that no network security group allows unrestricted inbound access to TCP port 5432.
What this control checks
Trivy AZU-0047 states that a security group rule should not allow unrestricted ingress from any IP address. Trivy AZU-0047 shows an azurerm_network_security_rule with direction set to Inbound and access set to Allow that uses a restrictive address prefix as the passing example. Trivy AZU-0047 says to restrict access to IP addresses or ranges that are explicitly required where possible.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
network_security_group_restrict_inbound_tcp_port_5432 - Powerpipe Control:
azure_compliance.control.network_security_group_restrict_inbound_tcp_port_5432 - Trivy Check:
AZU-0047
Last reviewed: 2026-10-13