Control: Network public IPs should use standard SKUs as a minimum

Description

The use of Basic or Free SKUs in Azure whilst cost effective have significant limitations in terms of what can be monitored and what support can be realized from Microsoft. Typically, these SKU's do not have a service SLA and Microsoft will usually refuse to provide support for them. Consequently Basic/Free SKUs should never be used for production workloads.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.network_public_ip_no_basic_sku

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.network_public_ip_no_basic_sku --share

SQL

This control uses a named query:

select
  i.id as resource,
  case
    when i.sku_name = 'Basic' then 'alarm'
    else 'ok'
  end as status,
  case
    when i.sku_name = 'Basic' then i.title || ' using basic SKU.'
    else i.title || ' using ' || sku_name || ' SKU.'
  end as reason
  
  , i.resource_group as resource_group
  , sub.display_name as subscription
from
  azure_public_ip as i
  left join azure_subscription as sub on i.subscription_id = sub.subscription_id;

Control: Network public IPs should use standard SKUs as a minimum

Description

Usage

SQL

Tags