Virtual machines should be in an approved virtual network
This policy audits any virtual machine connected to a virtual network that is not approved. The Azure Policy rule checks network interfaces whose ipconfigurations subnet id does not match the approved virtual network Id.
What this control checks
Audits any virtual machine connected to a virtual network that is not approved.
Common pitfalls
Effect defaults to Audit
The effect parameter has a defaultValue of Audit. Its allowedValues are Audit, Deny and Disabled.
virtualNetworkId expects a full resource ID
The virtualNetworkId parameter is the "Resource Id of the virtual network". Example: /subscriptions/YourSubscriptionId/resourceGroups/YourResourceGroupName/providers/Microsoft.Network/virtualNetworks/Name
Audit evidence
Evidence that deployed resources meet this control: Azure Policy compliance results for the built-in policy definition "Virtual machines should be connected to an approved virtual network" (d416745a-506c-48b6-8ab1-83cb814bcaa3); PowerPipe control azure_compliance.control.compute_vm_attached_with_network.
Framework-specific interpretation
HIPAA HITRUST v9.2: Mapped to 0805.01m1Organizational.12-01.m (01.04 Network Access Control), 0806.01m2Organizational.12356-01.m (01.04 Network Access Control), 0809.01n2Organizational.1234-01.n (01.04 Network Access Control) and 5 more clauses.
Framework mappings
The clauses this control is mapped to in each framework.
- 0805.01m1Organizational.12-01.m 01.04 Network Access Control
- 0806.01m2Organizational.12356-01.m 01.04 Network Access Control
- 0809.01n2Organizational.1234-01.n 01.04 Network Access Control
- 0810.01n2Organizational.5-01.n 01.04 Network Access Control
- 0811.01n2Organizational.6-01.n 01.04 Network Access Control
3 more clauses
- 0812.01n2Organizational.8-01.n 01.04 Network Access Control
- 0814.01n1Organizational.12-01.n 01.04 Network Access Control
- 0894.01m2Organizational.7-01.m 01.04 Network Access Control
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
compute_vm_attached_with_network - Powerpipe Control:
azure_compliance.control.compute_vm_attached_with_network - Azure Policy Definition:
d416745a-506c-48b6-8ab1-83cb814bcaa3
Last reviewed: 2026-10-11