Azure APRL and Custom Controls

This check implements APRL recommendation f0bf9ae6-25a5-974d-87d5-025abec73539: associate a Network Security Group with eligible subnets. The upstream APRL entry marks this recommendation as automatable. Its query excludes dedicated Gateway, Azure Firewall, Firewall Management, and Route Server subnets. A pass means no findings within that query scope; it is not a workload-level WAF assessment.

The result detail below shows which resources were found non-compliant and links to the APRL virtualNetworks page for related remediation guidance.

Remediation action:

Refer to the Learn more link in the result detail below. Each APRL recommendation includes:

1. A description of the risk
2. Recommended configuration or architecture change
3. Azure CLI / portal remediation steps where applicable

Related links

• Azure Proactive Resiliency Library v2
• Well-Architected Framework — Security pillar

%TestResult%