diff --git a/x-pack/filebeat/input/azureeventhub/input.go b/x-pack/filebeat/input/azureeventhub/input.go
index c2ad4f9c7adb..4bc26a235bde 100644
--- a/x-pack/filebeat/input/azureeventhub/input.go
+++ b/x-pack/filebeat/input/azureeventhub/input.go
@@ -46,6 +46,13 @@ func Plugin(log *logp.Logger) v2.Plugin {
 		Manager: &eventHubInputManager{
 			log: log,
 		},
+
+		// ExcludeFromFIPS = true to prevent this input from being used in FIPS-capable
+		// Filebeat distributions. This input indirectly uses algorithms that are not
+		// FIPS-compliant. Specifically, the input depends on the
+		// github.com/Azure/azure-sdk-for-go/sdk/azidentity package which, in turn,
+		// depends on the golang.org/x/crypto/pkcs12 package, which is not FIPS-compliant.
+		ExcludeFromFIPS: true,
 	}
 }
 
diff --git a/x-pack/filebeat/module/azure/_meta/docs.asciidoc b/x-pack/filebeat/module/azure/_meta/docs.asciidoc
index 9ed929f510d3..50ee7bb2443a 100644
--- a/x-pack/filebeat/module/azure/_meta/docs.asciidoc
+++ b/x-pack/filebeat/module/azure/_meta/docs.asciidoc
@@ -5,6 +5,8 @@
 
 == Azure module
 
+WARNING: This module is not available in FIPS-capable Filebeat.
+
 include::{libbeat-dir}/shared/integration-link.asciidoc[]
 
 The azure module retrieves different types of log data from Azure.