Skip to main content
Orphaned resources · Low severity

Azure NSG Not Associated with Any Resource

A network security group attached to nothing enforces nothing: the rules in it look like protection on an inventory list and filter no traffic.

Sign inExplore the playground

Free to start. No card. The playground just needs your work email.

Azureprovider
Lowseverity
Savingswhere it shows up
Guidedfix, after a review

Azure

Found, explained, fixed.

Findings with a dollar figure attached, idle, oversized, orphaned, unscheduled and undiscounted spend.

01

Detect

ZopNight checks this automatically across Azure, with read-only access to the account.

02

Explain

Every finding says exactly what to change: Delete unattached network security group. Where the saving can be proven it is priced; where it cannot, the finding says so.

03

Fix

After a guided review, where you confirm the change, ZopNight deletes the resource, then checks the change took.

Applies to
Network Security Groups on Azure
The fix, by hand
  1. NSG → the resource → Overview → check Associated subnets and Associated network interfaces.
  2. If empty, confirm via the Activity log that the NSG wasn't recently detached and is genuinely orphaned.
  3. Cross-check IaC (Bicep / Terraform / ARM). A still-tracked NSG will be recreated by the next pipeline run.
  4. Tag the NSG with lifecycle=delete-candidate and wait one business week to catch any external dependency.
  5. NSG → Delete; confirm by typing the NSG name.
  6. If you keep it deliberately, document the reason in the NSG's Description or a purpose tag.

ZopNight does this for you after a guided review.

Category
Orphaned resources. Resources no longer attached to anything that needs them, such as unattached volumes and unassigned IPs.
Where it appears
The Savings tab of Recommendations, with every affected resource listed.
Rule ID
RC-1361
Full reference

Azure NSG Not Associated with Any Resource

Related checks

Azure NSG Open to InternetAzureAzure Duplicate Flow LoggingAzureAzure Connection Monitor with No Surviving SourceAzureAzure Flow Log on a Gateway SubnetAzureAzure Recovery Vault OrphanAzureBedrock Custom Model OrphanAWS

See the orphaned resources in your account.

Connect a read-only role and the first pass runs on your own estate. This check, and the rest of the catalogue, with it.

Start freeExplore the playground

Prefer to talk it through first? Book 20 minutes with the team.

  • $30M+annualised cloud spend under management
  • 550K+resources tracked since launch
  • 20-60%off the bill in the first month
  • SOC 2Type II report, plus ISO 27001

Figures published on zop.dev.

Multi-cloud automation· Production-ready in 30 min· SOC 2 · ISO 27001· 20–60% off the bill, first month· 4 platforms · 1 console· Multi-cloud automation· Production-ready in 30 min· SOC 2 · ISO 27001· 20–60% off the bill, first month· 4 platforms · 1 console·