Web PubSub Without SLA SKU

Description

Azure Web PubSub is a real-time web messaging service that allows you to build real-time applications using WebSockets and other WebSub-compatible protocols. The service's tier or SKU determines its pricing, features, and SLA. The "Free_F1" SKU does not come with an SLA. To ensure service availability and support, it's recommended to use a SKU that provides an SLA.

This policy ensures that the Azure Web PubSub service is not using the "Free_F1" SKU, which lacks an SLA.

Code Example

resource "azurerm_web_pubsub" "example" {
  name                = "example-webpubsub"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
  
+ sku                 = "Standard_S1"  # or any other SKU with SLA
  
  tags = {
    Environment = "production"
  }
}

Remediation

Terraform

• Resource: azurerm_web_pubsub
• Arguments: sku

Rule Details

Field	Value
ID	IAC-0682
Severity	LOW
IaC Type	arm
Frameworks	Terraform,
Checkov ID	CKV_AZURE_175

References

• Checkov Rule

---