Private endpoint connections enforce secure communication by enabling private connectivity to Guest Configuration for virtual machines. Virtual machines will be non-compliant unless they have the tag, 'EnablePrivateNetworkGC'. This tag enforces secure communication through private connectivity to Guest Configuration for Virtual Machines. Private connectivity limits access to traffic coming only from known networks and prevents access from all other IP addresses, including within Azure.
Allowed: (Audit, Deny, Disabled)
Used RBAC Role
IF (2) Microsoft.Compute/virtualMachines Microsoft.GuestConfiguration/guestConfigurationAssignments