Public IP addresses in Azure can be of standard SKU, available as non-zonal, zonal, or zone-redundant. Zone-redundant IPs are accessible across all zones, resisting any single zone failure, thereby providing higher resilience.
Prevent connectivity failures due to SNAT port exhaustion by employing NAT gateway for outbound traffic from virtual networks, ensuring dynamic scaling and secure internet connections.
Click the Azure Resource Graph tab to view the query
//AzureResourceGraphquery//ListsVMswithPIPsresources|wheretype=~'Microsoft.Network/publicIPAddresses'|wheretostring(properties.ipConfiguration.id)contains"microsoft.network/networkinterfaces"|projectrecommendationId="1adba190-5c4c-e646-8527-dd1b2a6d8b15",name,id,tags,param1=strcat("Migrate from instance IP to NAT Gateway")
Upgrade Basic SKU public IP addresses to Standard SKU
Basic SKU public IP addresses will be retired on September 30, 2025. Users are advised to upgrade to Standard SKU public IP addresses before this date to avoid service disruptions.
Click the Azure Resource Graph tab to view the query
//AzureResourceGraphquery//PublicIPaddressesshouldhaveDDoSprotectionenabledresources|wheretype=~'Microsoft.Network/publicIPAddresses'|whereproperties.ddosSettings.protectionMode!in~("Enabled","VirtualNetworkInherited")|projectrecommendationId="c4254c66-b8a5-47aa-82f6-e7d7fb418f47",name,id,tags,param1=strcat("Apply either DDoS Network protection or DDoS IP Protrection to the public IP address.")