AzPolicyAdvertizer

last sync: 2025-Oct-31 18:22:59 UTC

Configure Azure Log Analytics workspaces to disable public network access for log ingestion and querying

Azure BuiltIn Policy definition

Source Azure Portal
Display name Configure Azure Log Analytics workspaces to disable public network access for log ingestion and querying
Id d3ba9c42-9dd5-441a-957c-274031c750c0
Version 1.1.0
Details on versioning
Versioning Versions supported for Versioning: 1
1.1.0
Built-in Versioning [Preview]
Category Monitoring
Microsoft Learn
Description Improve workspace security by blocking log ingestion and querying from public networks. Only private-link connected networks will be able to ingest and query logs on this workspace. Learn more at https://aka.ms/AzMonPrivateLink#configure-log-analytics.
Cloud environments AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown
Available in AzUSGov Unknown, no evidence if Policy definition is/not available in AzureUSGovernment
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Default
Modify
Allowed
Modify, Disabled
RBAC role(s)
Role Name Role Id
Log Analytics Contributor 92aaf0da-9dab-42b6-94a3-d43ce8d16293
Rule aliases IF (2)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.OperationalInsights/workspaces/publicNetworkAccessForIngestion Microsoft.OperationalInsights workspaces properties.publicNetworkAccessForIngestion True True
Microsoft.OperationalInsights/workspaces/publicNetworkAccessForQuery Microsoft.OperationalInsights workspaces properties.publicNetworkAccessForQuery True True
THEN-Operations (2)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.OperationalInsights/workspaces/publicNetworkAccessForIngestion Microsoft.OperationalInsights workspaces properties.publicNetworkAccessForIngestion True True
Microsoft.OperationalInsights/workspaces/publicNetworkAccessForQuery Microsoft.OperationalInsights workspaces properties.publicNetworkAccessForQuery True True
Rule resource types IF (1)
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2021-07-30 15:17:20 change Minor (1.0.0 > 1.1.0)
2021-07-07 15:26:31 add d3ba9c42-9dd5-441a-957c-274031c750c0
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC