Recommendations
Recommendations
Azure Quick Review checks the following recommendations for Azure resources. The recommendations are categorized based on their impact and category:
## Recommendations List
Total Supported Azure Resource Types: 90
| Id | Resource Type | Category | Impact | Recommendation | Learn | |
|---|---|---|---|---|---|---|
| 1 | adf-001 | Microsoft.DataFactory/factories | MonitoringAndAlerting | Low | Azure Data Factory should have diagnostic settings enabled | Learn |
| 2 | adf-002 | Microsoft.DataFactory/factories | Security | High | Azure Data Factory should have private endpoints enabled | Learn |
| 3 | adf-003 | Microsoft.DataFactory/factories | HighAvailability | High | Azure Data Factory SLA | Learn |
| 4 | adf-004 | Microsoft.DataFactory/factories | Governance | Low | Azure Data Factory Name should comply with naming conventions | Learn |
| 5 | adf-005 | Microsoft.DataFactory/factories | Governance | Low | Azure Data Factory should have tags | Learn |
| 6 | afd-001 | Microsoft.Cdn/profiles | MonitoringAndAlerting | Low | Azure FrontDoor should have diagnostic settings enabled | Learn |
| 7 | afd-003 | Microsoft.Cdn/profiles | HighAvailability | High | Azure FrontDoor SLA | Learn |
| 8 | afd-006 | Microsoft.Cdn/profiles | Governance | Low | Azure FrontDoor Name should comply with naming conventions | Learn |
| 9 | afd-007 | Microsoft.Cdn/profiles | Governance | Low | Azure FrontDoor should have tags | Learn |
| 10 | afw-001 | Microsoft.Network/azureFirewalls | MonitoringAndAlerting | Low | Azure Firewall should have diagnostic settings enabled | Learn |
| 11 | afw-003 | Microsoft.Network/azureFirewalls | HighAvailability | High | Azure Firewall SLA | Learn |
| 12 | afw-006 | Microsoft.Network/azureFirewalls | Governance | Low | Azure Firewall Name should comply with naming conventions | Learn |
| 13 | afw-007 | Microsoft.Network/azureFirewalls | Governance | Low | Azure Firewall should have tags | Learn |
| 14 | agw-005 | Microsoft.Network/applicationGateways | MonitoringAndAlerting | Low | Application Gateway: Monitor and Log the configurations and traffic | Learn |
| 15 | agw-103 | Microsoft.Network/applicationGateways | HighAvailability | High | Application Gateway SLA | Learn |
| 16 | agw-105 | Microsoft.Network/applicationGateways | Governance | Low | Application Gateway Name should comply with naming conventions | Learn |
| 17 | agw-106 | Microsoft.Network/applicationGateways | Governance | Low | Application Gateway should have tags | Learn |
| 18 | aif-001 | Microsoft.CognitiveServices/accounts | MonitoringAndAlerting | Low | Service should have diagnostic settings enabled | Learn |
| 19 | aif-003 | Microsoft.CognitiveServices/accounts | HighAvailability | High | Service should have a SLA | Learn |
| 20 | aif-004 | Microsoft.CognitiveServices/accounts | Security | High | Service should have private endpoints enabled | Learn |
| 21 | aif-006 | Microsoft.CognitiveServices/accounts | Governance | Low | Service Name should comply with naming conventions | Learn |
| 22 | aif-007 | Microsoft.CognitiveServices/accounts | Governance | Low | Service should have tags | Learn |
| 23 | aif-008 | Microsoft.CognitiveServices/accounts | Security | Medium | Service should have local authentication disabled | Learn |
| 24 | aks-001 | Microsoft.ContainerService/managedClusters | MonitoringAndAlerting | Low | AKS Cluster should have diagnostic settings enabled | Learn |
| 25 | aks-003 | Microsoft.ContainerService/managedClusters | HighAvailability | High | AKS Cluster should have an SLA | Learn |
| 26 | aks-004 | Microsoft.ContainerService/managedClusters | Security | High | AKS Cluster should be private | Learn |
| 27 | aks-006 | Microsoft.ContainerService/managedClusters | Governance | Low | AKS Name should comply with naming conventions | Learn |
| 28 | aks-007 | Microsoft.ContainerService/managedClusters | Security | Medium | AKS should integrate authentication with AAD (Managed) | Learn |
| 29 | aks-010 | Microsoft.ContainerService/managedClusters | Security | Medium | AKS should have httpApplicationRouting disabled | Learn |
| 30 | aks-012 | Microsoft.ContainerService/managedClusters | Security | High | AKS should have outbound type set to user defined routing | Learn |
| 31 | aks-015 | Microsoft.ContainerService/managedClusters | Governance | Low | AKS should have tags | Learn |
| 32 | aks-016 | Microsoft.ContainerService/managedClusters | Scalability | Low | AKS Node Pools should have MaxSurge set | Learn |
| 33 | amg-001 | Microsoft.Dashboard/managedGrafana | Governance | Low | Azure Managed Grafana name should comply with naming conventions | Learn |
| 34 | amg-002 | Microsoft.Dashboard/managedGrafana | HighAvailability | High | Azure Managed Grafana SLA | Learn |
| 35 | amg-003 | Microsoft.Dashboard/managedGrafana | Governance | Low | Azure Managed Grafana should have tags | Learn |
| 36 | amg-004 | Microsoft.Dashboard/managedGrafana | Security | High | Azure Managed Grafana should disable public network access | Learn |
| 37 | amg-005 | Microsoft.Dashboard/managedGrafana | HighAvailability | High | Azure Managed Grafana should have availability zones enabled | Learn |
| 38 | apim-001 | Microsoft.ApiManagement/service | MonitoringAndAlerting | Low | APIM should have diagnostic settings enabled | Learn |
| 39 | apim-003 | Microsoft.ApiManagement/service | HighAvailability | High | APIM should have a SLA | Learn |
| 40 | apim-004 | Microsoft.ApiManagement/service | Security | High | APIM should have private endpoints enabled | Learn |
| 41 | apim-006 | Microsoft.ApiManagement/service | Governance | Low | APIM should comply with naming conventions | Learn |
| 42 | apim-007 | Microsoft.ApiManagement/service | Governance | Low | APIM should have tags | Learn |
| 43 | apim-008 | Microsoft.ApiManagement/service | Security | Medium | APIM should use Managed Identities | Learn |
| 44 | apim-009 | Microsoft.ApiManagement/service | Security | High | APIM should only accept a minimum of TLS 1.2 | Learn |
| 45 | apim-010 | Microsoft.ApiManagement/service | Security | High | APIM should should not accept weak or deprecated ciphers. | Learn |
| 46 | apim-011 | Microsoft.ApiManagement/service | Security | High | APIM: Renew expiring certificates | Learn |
| 47 | app-001 | Microsoft.Web/sites | MonitoringAndAlerting | Low | App Service should have diagnostic settings enabled | Learn |
| 48 | app-004 | Microsoft.Web/sites | Security | High | App Service should have private endpoints enabled | Learn |
| 49 | app-006 | Microsoft.Web/sites | Governance | Low | App Service Name should comply with naming conventions | Learn |
| 50 | app-007 | Microsoft.Web/sites | Security | High | App Service should use HTTPS only | Learn |
| 51 | app-008 | Microsoft.Web/sites | Governance | Low | App Service should have tags | Learn |
| 52 | app-009 | Microsoft.Web/sites | Security | Medium | App Service should use VNET integration | Learn |
| 53 | app-010 | Microsoft.Web/sites | Security | Medium | App Service should have VNET Route all enabled for VNET integration | Learn |
| 54 | app-011 | Microsoft.Web/sites | Security | High | App Service should use TLS 1.2 | Learn |
| 55 | app-012 | Microsoft.Web/sites | Security | High | App Service remote debugging should be disabled | Learn |
| 56 | app-013 | Microsoft.Web/sites | Security | High | App Service should not allow insecure FTP | Learn |
| 57 | app-014 | Microsoft.Web/sites | Scalability | High | App Service should have Always On enabled | Learn |
| 58 | app-015 | Microsoft.Web/sites | HighAvailability | Medium | App Service should avoid using Client Affinity | Learn |
| 59 | app-016 | Microsoft.Web/sites | Security | Medium | App Service should use Managed Identities | Learn |
| 60 | appcs-001 | Microsoft.AppConfiguration/configurationStores | MonitoringAndAlerting | Low | AppConfiguration should have diagnostic settings enabled | Learn |
| 61 | appcs-003 | Microsoft.AppConfiguration/configurationStores | HighAvailability | High | AppConfiguration should have a SLA | Learn |
| 62 | appcs-004 | Microsoft.AppConfiguration/configurationStores | Security | High | AppConfiguration should have private endpoints enabled | Learn |
| 63 | appcs-006 | Microsoft.AppConfiguration/configurationStores | Governance | Low | AppConfiguration Name should comply with naming conventions | Learn |
| 64 | appcs-007 | Microsoft.AppConfiguration/configurationStores | Governance | Low | AppConfiguration should have tags | Learn |
| 65 | appcs-008 | Microsoft.AppConfiguration/configurationStores | Security | Medium | AppConfiguration should have local authentication disabled | Learn |
| 66 | appi-001 | Microsoft.Insights/components | HighAvailability | High | Azure Application Insights SLA | Learn |
| 67 | appi-002 | Microsoft.Insights/components | Governance | Low | Azure Application Insights Name should comply with naming conventions | Learn |
| 68 | appi-003 | Microsoft.Insights/components | Governance | Low | Azure Application Insights should have tags | Learn |
| 69 | as-001 | Microsoft.AnalysisServices/servers | MonitoringAndAlerting | Low | Azure Analysis Service should have diagnostic settings enabled | Learn |
| 70 | as-002 | Microsoft.AnalysisServices/servers | HighAvailability | High | Azure Analysis Service should have a SLA | Learn |
| 71 | as-004 | Microsoft.AnalysisServices/servers | Governance | Low | Azure Analysis Service Name should comply with naming conventions | Learn |
| 72 | as-005 | Microsoft.AnalysisServices/servers | Governance | Low | Azure Analysis Service should have tags | Learn |
| 73 | asp-001 | Microsoft.Web/serverfarms | MonitoringAndAlerting | Low | Plan should have diagnostic settings enabled | Learn |
| 74 | asp-003 | Microsoft.Web/serverfarms | HighAvailability | High | Plan should have a SLA | Learn |
| 75 | asp-006 | Microsoft.Web/serverfarms | Governance | Low | Plan Name should comply with naming conventions | Learn |
| 76 | asp-007 | Microsoft.Web/serverfarms | Governance | Low | Plan should have tags | Learn |
| 77 | ca-003 | Microsoft.App/containerApps | HighAvailability | High | ContainerApp should have a SLA | Learn |
| 78 | ca-006 | Microsoft.App/containerApps | Governance | Low | ContainerApp Name should comply with naming conventions | Learn |
| 79 | ca-007 | Microsoft.App/containerApps | Governance | Low | ContainerApp should have tags | Learn |
| 80 | ca-008 | Microsoft.App/containerApps | Security | Low | ContainerApp should not allow insecure ingress traffic | Learn |
| 81 | ca-009 | Microsoft.App/containerApps | Security | Low | ContainerApp should use Managed Identities | Learn |
| 82 | ca-010 | Microsoft.App/containerApps | HighAvailability | Low | ContainerApp should use Azure Files to persist container data | Learn |
| 83 | ca-011 | Microsoft.App/containerApps | HighAvailability | Low | ContainerApp should avoid using session affinity | Learn |
| 84 | cae-001 | Microsoft.App/managedenvironments | MonitoringAndAlerting | Low | Container Apps Environment should have diagnostic settings enabled | Learn |
| 85 | cae-003 | Microsoft.App/managedenvironments | HighAvailability | High | Container Apps Environment should have a SLA | Learn |
| 86 | cae-004 | Microsoft.App/managedenvironments | Security | High | Container Apps Environment should have private endpoints enabled | Learn |
| 87 | cae-006 | Microsoft.App/managedenvironments | Governance | Low | Container Apps Environment Name should comply with naming conventions | Learn |
| 88 | cae-007 | Microsoft.App/managedenvironments | Governance | Low | Container Apps Environment should have tags | Learn |
| 89 | ci-002 | Microsoft.ContainerInstance/containerGroups | HighAvailability | High | ContainerInstance should have availability zones enabled | Learn |
| 90 | ci-003 | Microsoft.ContainerInstance/containerGroups | HighAvailability | High | ContainerInstance should have a SLA | Learn |
| 91 | ci-004 | Microsoft.ContainerInstance/containerGroups | Security | High | ContainerInstance should use private IP addresses | Learn |
| 92 | ci-006 | Microsoft.ContainerInstance/containerGroups | Governance | Low | ContainerInstance Name should comply with naming conventions | Learn |
| 93 | ci-007 | Microsoft.ContainerInstance/containerGroups | Governance | Low | ContainerInstance should have tags | Learn |
| 94 | cosmos-001 | Microsoft.DocumentDB/databaseAccounts | MonitoringAndAlerting | Low | CosmosDB should have diagnostic settings enabled | Learn |
| 95 | cosmos-003 | Microsoft.DocumentDB/databaseAccounts | HighAvailability | High | CosmosDB should have a SLA | Learn |
| 96 | cosmos-004 | Microsoft.DocumentDB/databaseAccounts | Security | High | CosmosDB should have private endpoints enabled | Learn |
| 97 | cosmos-006 | Microsoft.DocumentDB/databaseAccounts | Governance | Low | CosmosDB Name should comply with naming conventions | Learn |
| 98 | cosmos-007 | Microsoft.DocumentDB/databaseAccounts | Governance | Low | CosmosDB should have tags | Learn |
| 99 | cosmos-008 | Microsoft.DocumentDB/databaseAccounts | Security | High | CosmosDB should have local authentication disabled | Learn |
| 100 | cosmos-009 | Microsoft.DocumentDB/databaseAccounts | Security | High | CosmosDB: disable write operations on metadata resources (databases, containers, throughput) via account keys | Learn |
| 101 | cr-001 | Microsoft.ContainerRegistry/registries | MonitoringAndAlerting | Low | ContainerRegistry should have diagnostic settings enabled | Learn |
| 102 | cr-003 | Microsoft.ContainerRegistry/registries | HighAvailability | High | ContainerRegistry should have a SLA | Learn |
| 103 | cr-004 | Microsoft.ContainerRegistry/registries | Security | High | ContainerRegistry should have private endpoints enabled | Learn |
| 104 | cr-006 | Microsoft.ContainerRegistry/registries | Governance | Low | ContainerRegistry Name should comply with naming conventions | Learn |
| 105 | cr-008 | Microsoft.ContainerRegistry/registries | Security | Medium | ContainerRegistry should have the Administrator account disabled | Learn |
| 106 | cr-009 | Microsoft.ContainerRegistry/registries | Governance | Low | ContainerRegistry should have tags | Learn |
| 107 | cr-010 | Microsoft.ContainerRegistry/registries | Governance | Medium | ContainerRegistry should use retention policies | Learn |
| 108 | dbw-001 | Microsoft.Databricks/workspaces | MonitoringAndAlerting | Low | Azure Databricks should have diagnostic settings enabled | Learn |
| 109 | dbw-003 | Microsoft.Databricks/workspaces | HighAvailability | High | Azure Databricks should have a SLA | Learn |
| 110 | dbw-004 | Microsoft.Databricks/workspaces | Security | High | Azure Databricks should have private endpoints enabled | Learn |
| 111 | dbw-006 | Microsoft.Databricks/workspaces | Governance | Low | Azure Databricks Name should comply with naming conventions | Learn |
| 112 | dbw-007 | Microsoft.Databricks/workspaces | Security | Medium | Azure Databricks should have the Public IP disabled | Learn |
| 113 | dec-001 | Microsoft.Kusto/clusters | MonitoringAndAlerting | Low | Azure Data Explorer should have diagnostic settings enabled | Learn |
| 114 | dec-002 | Microsoft.Kusto/clusters | HighAvailability | High | Azure Data Explorer SLA | Learn |
| 115 | dec-003 | Microsoft.Kusto/clusters | HighAvailability | High | Azure Data Explorer Production Cluster should not use Dev SKU | Learn |
| 116 | dec-004 | Microsoft.Kusto/clusters | Security | High | Azure Data Explorer should have private endpoints enabled | Learn |
| 117 | dec-005 | Microsoft.Kusto/clusters | Governance | Low | Azure Data Explorer should have tags | Learn |
| 118 | dec-006 | Microsoft.Kusto/clusters | Governance | Low | Azure Data Explorer Name should comply with naming conventions | Learn |
| 119 | dec-008 | Microsoft.Kusto/clusters | Security | High | Azure Data Explorer should use Disk Encryption | Learn |
| 120 | dec-009 | Microsoft.Kusto/clusters | Security | Low | Azure Data Explorer should use Managed Identities | Learn |
| 121 | evgd-001 | Microsoft.EventGrid/domains | MonitoringAndAlerting | Low | Event Grid Domain should have diagnostic settings enabled | Learn |
| 122 | evgd-003 | Microsoft.EventGrid/domains | HighAvailability | High | Event Grid Domain should have a SLA | Learn |
| 123 | evgd-004 | Microsoft.EventGrid/domains | Security | High | Event Grid Domain should have private endpoints enabled | Learn |
| 124 | evgd-006 | Microsoft.EventGrid/domains | Governance | Low | Event Grid Domain Name should comply with naming conventions | Learn |
| 125 | evgd-007 | Microsoft.EventGrid/domains | Governance | Low | Event Grid Domain should have tags | Learn |
| 126 | evgd-008 | Microsoft.EventGrid/domains | Security | Medium | Event Grid Domain should have local authentication disabled | Learn |
| 127 | evh-001 | Microsoft.EventHub/namespaces | MonitoringAndAlerting | Low | Event Hub Namespace should have diagnostic settings enabled | Learn |
| 128 | evh-003 | Microsoft.EventHub/namespaces | HighAvailability | High | Event Hub Namespace should have a SLA | Learn |
| 129 | evh-004 | Microsoft.EventHub/namespaces | Security | High | Event Hub Namespace should have private endpoints enabled | Learn |
| 130 | evh-006 | Microsoft.EventHub/namespaces | Governance | Low | Event Hub Namespace Name should comply with naming conventions | Learn |
| 131 | evh-007 | Microsoft.EventHub/namespaces | Governance | Low | Event Hub should have tags | Learn |
| 132 | evh-008 | Microsoft.EventHub/namespaces | Security | Medium | Event Hub should have local authentication disabled | Learn |
| 133 | fabric-001 | Microsoft.Fabric/capacities | HighAvailability | High | Fabric Capacity should have a SLA | Learn |
| 134 | fabric-002 | Microsoft.Fabric/capacities | Governance | Low | Fabric Capacity Name should comply with naming conventions | Learn |
| 135 | fabric-003 | Microsoft.Fabric/capacities | Governance | Low | Fabric Capacity should have tags defined | Learn |
| 136 | fabric-004 | Microsoft.Fabric/capacities | OtherBestPractices | Medium | Fabric Capacity should be in Active state | Learn |
| 137 | fabric-005 | Microsoft.Fabric/capacities | Security | Medium | Fabric Capacity should have administrators configured | Learn |
| 138 | fabric-006 | Microsoft.Fabric/capacities | Governance | Medium | Fabric Capacity should use Fabric (F) SKU tier for production workloads | Learn |
| 139 | func-001 | Microsoft.Web/sites | MonitoringAndAlerting | Low | Function should have diagnostic settings enabled | Learn |
| 140 | func-004 | Microsoft.Web/sites | Security | High | Function should have private endpoints enabled | Learn |
| 141 | func-006 | Microsoft.Web/sites | Governance | Low | Function Name should comply with naming conventions | Learn |
| 142 | func-007 | Microsoft.Web/sites | Security | High | Function should use HTTPS only | Learn |
| 143 | func-008 | Microsoft.Web/sites | Governance | Low | Function should have tags | Learn |
| 144 | func-009 | Microsoft.Web/sites | Security | Medium | Function should use VNET integration | Learn |
| 145 | func-010 | Microsoft.Web/sites | Security | Medium | Function should have VNET Route all enabled for VNET integration | Learn |
| 146 | func-011 | Microsoft.Web/sites | Security | Medium | Function should use TLS 1.2 | Learn |
| 147 | func-012 | Microsoft.Web/sites | Security | Medium | Function remote debugging should be disabled | Learn |
| 148 | func-013 | Microsoft.Web/sites | HighAvailability | Medium | Function should avoid using Client Affinity | Learn |
| 149 | func-014 | Microsoft.Web/sites | Security | Medium | Function should use Managed Identities | Learn |
| 150 | hub-001 | Microsoft.MachineLearningServices/workspaces | Governance | Low | Service name should comply with naming conventions | Learn |
| 151 | hub-002 | Microsoft.MachineLearningServices/workspaces | HighAvailability | High | Service SLA | Learn |
| 152 | hub-003 | Microsoft.MachineLearningServices/workspaces | Governance | Low | Service should have tags | Learn |
| 153 | hub-004 | Microsoft.MachineLearningServices/workspaces | Security | High | Service should disable public network access | Learn |
| 154 | hub-005 | Microsoft.MachineLearningServices/workspaces | Security | High | Service should have private enpoints enabled | Learn |
| 155 | hub-006 | Microsoft.MachineLearningServices/workspaces | MonitoringAndAlerting | Low | Service should have diagnostic settings enabled | Learn |
| 156 | it-006 | Microsoft.VirtualMachineImages/imageTemplates | Governance | Low | Image Template Name should comply with naming conventions | Learn |
| 157 | it-007 | Microsoft.VirtualMachineImages/imageTemplates | Governance | Low | Image Template should have tags | Learn |
| 158 | kv-001 | Microsoft.KeyVault/vaults | MonitoringAndAlerting | Low | Key Vault should have diagnostic settings enabled | Learn |
| 159 | kv-003 | Microsoft.KeyVault/vaults | HighAvailability | High | Key Vault should have a SLA | Learn |
| 160 | kv-006 | Microsoft.KeyVault/vaults | Governance | Low | Key Vault Name should comply with naming conventions | Learn |
| 161 | kv-007 | Microsoft.KeyVault/vaults | Governance | Low | Key Vault should have tags | Learn |
| 162 | lb-001 | Microsoft.Network/loadBalancers | MonitoringAndAlerting | Low | Load Balancer should have diagnostic settings enabled | Learn |
| 163 | lb-003 | Microsoft.Network/loadBalancers | HighAvailability | High | Load Balancer should have a SLA | Learn |
| 164 | lb-006 | Microsoft.Network/loadBalancers | Governance | Low | Load Balancer Name should comply with naming conventions | Learn |
| 165 | lb-007 | Microsoft.Network/loadBalancers | Governance | Low | Load Balancer should have tags | Learn |
| 166 | log-003 | Microsoft.OperationalInsights/workspaces | HighAvailability | High | Log Analytics Workspace SLA | Learn |
| 167 | log-006 | Microsoft.OperationalInsights/workspaces | Governance | Low | Log Analytics Workspace Name should comply with naming conventions | Learn |
| 168 | log-007 | Microsoft.OperationalInsights/workspaces | Governance | Low | Log Analytics Workspace should have tags | Learn |
| 169 | logic-001 | Microsoft.Logic/workflows | MonitoringAndAlerting | Low | Logic App should have diagnostic settings enabled | Learn |
| 170 | logic-003 | Microsoft.Logic/workflows | HighAvailability | High | Logic App should have a SLA | Learn |
| 171 | logic-004 | Microsoft.Logic/workflows | Security | High | Logic App should limit access to Http Triggers | Learn |
| 172 | logic-006 | Microsoft.Logic/workflows | Governance | Low | Logic App Name should comply with naming conventions | Learn |
| 173 | logic-007 | Microsoft.Logic/workflows | Governance | Low | Logic App should have tags | Learn |
| 174 | logics-001 | Microsoft.Web/sites | MonitoringAndAlerting | Low | Logic App should have diagnostic settings enabled | Learn |
| 175 | logics-004 | Microsoft.Web/sites | Security | High | Logic App should have private endpoints enabled | Learn |
| 176 | logics-006 | Microsoft.Web/sites | Governance | Low | Logic App Name should comply with naming conventions | Learn |
| 177 | logics-007 | Microsoft.Web/sites | Security | High | Logic App should use HTTPS only | Learn |
| 178 | logics-008 | Microsoft.Web/sites | Governance | Low | Logic App should have tags | Learn |
| 179 | logics-009 | Microsoft.Web/sites | Security | Medium | Logic App should use VNET integration | Learn |
| 180 | logics-010 | Microsoft.Web/sites | Security | Medium | Logic App should have VNET Route all enabled for VNET integration | Learn |
| 181 | logics-011 | Microsoft.Web/sites | Security | Medium | Logic App should use TLS 1.2 | Learn |
| 182 | logics-012 | Microsoft.Web/sites | Security | Medium | Logic App remote debugging should be disabled | Learn |
| 183 | logics-013 | Microsoft.Web/sites | HighAvailability | Medium | Logic App should avoid using Client Affinity | Learn |
| 184 | logics-014 | Microsoft.Web/sites | Security | Medium | Logic App should use Managed Identities | Learn |
| 185 | maria-001 | Microsoft.DBforMariaDB/servers | MonitoringAndAlerting | Low | MariaDB should have diagnostic settings enabled | Learn |
| 186 | maria-002 | Microsoft.DBforMariaDB/servers | Security | High | MariaDB should have private endpoints enabled | Learn |
| 187 | maria-003 | Microsoft.DBforMariaDB/servers | Governance | Low | MariaDB server Name should comply with naming conventions | Learn |
| 188 | maria-004 | Microsoft.DBforMariaDB/servers | HighAvailability | High | MariaDB server should have a SLA | Learn |
| 189 | maria-005 | Microsoft.DBforMariaDB/servers | Governance | Low | MariaDB should have tags | Learn |
| 190 | maria-006 | Microsoft.DBforMariaDB/servers | Security | Low | MariaDB should enforce TLS >= 1.2 | Learn |
| 191 | mysql-001 | Microsoft.DBforMySQL/servers | MonitoringAndAlerting | Low | Azure Database for MySQL - Single Server should have diagnostic settings enabled | Learn |
| 192 | mysql-003 | Microsoft.DBforMySQL/servers | HighAvailability | High | Azure Database for MySQL - Single Server should have a SLA | Learn |
| 193 | mysql-004 | Microsoft.DBforMySQL/servers | Security | High | Azure Database for MySQL - Single Server should have private endpoints enabled | Learn |
| 194 | mysql-006 | Microsoft.DBforMySQL/servers | Governance | Low | Azure Database for MySQL - Single Server Name should comply with naming conventions | Learn |
| 195 | mysql-007 | Microsoft.DBforMySQL/servers | HighAvailability | High | Azure Database for MySQL - Single Server is on the retirement path | Learn |
| 196 | mysql-008 | Microsoft.DBforMySQL/servers | Governance | Low | Azure Database for MySQL - Single Server should have tags | Learn |
| 197 | mysqlf-001 | Microsoft.DBforMySQL/flexibleServers | MonitoringAndAlerting | Low | Azure Database for MySQL - Flexible Server should have diagnostic settings enabled | Learn |
| 198 | mysqlf-003 | Microsoft.DBforMySQL/flexibleServers | HighAvailability | High | Azure Database for MySQL - Flexible Server should have a SLA | Learn |
| 199 | mysqlf-004 | Microsoft.DBforMySQL/flexibleServers | Security | High | Azure Database for MySQL - Flexible Server should have private access enabled | Learn |
| 200 | mysqlf-006 | Microsoft.DBforMySQL/flexibleServers | Governance | Low | Azure Database for MySQL - Flexible Server Name should comply with naming conventions | Learn |
| 201 | mysqlf-007 | Microsoft.DBforMySQL/flexibleServers | Governance | Low | Azure Database for MySQL - Flexible Server should have tags | Learn |
| 202 | ng-001 | Microsoft.Network/natGateways | MonitoringAndAlerting | Low | NAT Gateway should have diagnostic settings enabled | Learn |
| 203 | ng-003 | Microsoft.Network/natGateways | HighAvailability | High | NAT Gateway SLA | Learn |
| 204 | ng-006 | Microsoft.Network/natGateways | Governance | Low | NAT Gateway Name should comply with naming conventions | Learn |
| 205 | ng-007 | Microsoft.Network/natGateways | Governance | Low | NAT Gateway should have tags | Learn |
| 206 | nsg-001 | Microsoft.Network/networkSecurityGroups | MonitoringAndAlerting | Low | NSG should have diagnostic settings enabled | Learn |
| 207 | nsg-003 | Microsoft.Network/networkSecurityGroups | HighAvailability | High | NSG SLA | Learn |
| 208 | nsg-006 | Microsoft.Network/networkSecurityGroups | Governance | Low | NSG Name should comply with naming conventions | Learn |
| 209 | nsg-007 | Microsoft.Network/networkSecurityGroups | Governance | Low | NSG should have tags | Learn |
| 210 | nw-003 | Microsoft.Network/networkWatchers | HighAvailability | High | Network Watcher SLA | Learn |
| 211 | nw-006 | Microsoft.Network/networkWatchers | Governance | Low | Network Watcher Name should comply with naming conventions | Learn |
| 212 | nw-007 | Microsoft.Network/networkWatchers | Governance | Low | Network Watcher should have tags | Learn |
| 213 | pep-003 | Microsoft.Network/privateEndpoints | HighAvailability | High | Private Endpoint SLA | Learn |
| 214 | pep-006 | Microsoft.Network/privateEndpoints | Governance | Low | Private Endpoint Name should comply with naming conventions | Learn |
| 215 | pep-007 | Microsoft.Network/privateEndpoints | Governance | Low | Private Endpoint should have tags | Learn |
| 216 | pip-003 | Microsoft.Network/publicIPAddresses | HighAvailability | High | Public IP SLA | Learn |
| 217 | pip-006 | Microsoft.Network/publicIPAddresses | Governance | Low | Public IP Name should comply with naming conventions | Learn |
| 218 | pip-007 | Microsoft.Network/publicIPAddresses | Governance | Low | Public IP should have tags | Learn |
| 219 | psql-001 | Microsoft.DBforPostgreSQL/servers | MonitoringAndAlerting | Low | PostgreSQL should have diagnostic settings enabled | Learn |
| 220 | psql-003 | Microsoft.DBforPostgreSQL/servers | HighAvailability | High | PostgreSQL should have a SLA | Learn |
| 221 | psql-004 | Microsoft.DBforPostgreSQL/servers | Security | High | PostgreSQL should have private endpoints enabled | Learn |
| 222 | psql-006 | Microsoft.DBforPostgreSQL/servers | Governance | Low | PostgreSQL Name should comply with naming conventions | Learn |
| 223 | psql-007 | Microsoft.DBforPostgreSQL/servers | Governance | Low | PostgreSQL should have tags | Learn |
| 224 | psql-008 | Microsoft.DBforPostgreSQL/servers | Security | High | PostgreSQL should enforce SSL | Learn |
| 225 | psql-009 | Microsoft.DBforPostgreSQL/servers | Security | Low | PostgreSQL should enforce TLS >= 1.2 | Learn |
| 226 | psqlf-001 | Microsoft.DBforPostgreSQL/flexibleServers | MonitoringAndAlerting | Low | PostgreSQL should have diagnostic settings enabled | Learn |
| 227 | psqlf-003 | Microsoft.DBforPostgreSQL/flexibleServers | HighAvailability | High | PostgreSQL should have a SLA | Learn |
| 228 | psqlf-004 | Microsoft.DBforPostgreSQL/flexibleServers | Security | High | PostgreSQL should have private access enabled | Learn |
| 229 | psqlf-006 | Microsoft.DBforPostgreSQL/flexibleServers | Governance | Low | PostgreSQL Name should comply with naming conventions | Learn |
| 230 | psqlf-007 | Microsoft.DBforPostgreSQL/flexibleServers | Governance | Low | PostgreSQL should have tags | Learn |
| 231 | redis-001 | Microsoft.Cache/Redis | MonitoringAndAlerting | Low | Redis should have diagnostic settings enabled | Learn |
| 232 | redis-003 | Microsoft.Cache/Redis | HighAvailability | High | Redis should have a SLA | Learn |
| 233 | redis-006 | Microsoft.Cache/Redis | Governance | Low | Redis Name should comply with naming conventions | Learn |
| 234 | redis-007 | Microsoft.Cache/Redis | Governance | Low | Redis should have tags | Learn |
| 235 | redis-008 | Microsoft.Cache/Redis | Security | High | Redis should not enable non SSL ports | Learn |
| 236 | redis-009 | Microsoft.Cache/Redis | Security | Low | Redis should enforce TLS >= 1.2 | Learn |
| 237 | sb-001 | Microsoft.ServiceBus/namespaces | MonitoringAndAlerting | Low | Service Bus should have diagnostic settings enabled | Learn |
| 238 | sb-003 | Microsoft.ServiceBus/namespaces | HighAvailability | High | Service Bus should have a SLA | Learn |
| 239 | sb-004 | Microsoft.ServiceBus/namespaces | Security | High | Service Bus should have private endpoints enabled | Learn |
| 240 | sb-006 | Microsoft.ServiceBus/namespaces | Governance | Low | Service Bus Name should comply with naming conventions | Learn |
| 241 | sb-007 | Microsoft.ServiceBus/namespaces | Governance | Low | Service Bus should have tags | Learn |
| 242 | sb-008 | Microsoft.ServiceBus/namespaces | Security | Medium | Service Bus should have local authentication disabled | Learn |
| 243 | sigr-001 | Microsoft.SignalRService/SignalR | MonitoringAndAlerting | Low | SignalR should have diagnostic settings enabled | Learn |
| 244 | sigr-003 | Microsoft.SignalRService/SignalR | HighAvailability | High | SignalR should have a SLA | Learn |
| 245 | sigr-004 | Microsoft.SignalRService/SignalR | Security | High | SignalR should have private endpoints enabled | Learn |
| 246 | sigr-006 | Microsoft.SignalRService/SignalR | Governance | Low | SignalR Name should comply with naming conventions | Learn |
| 247 | sigr-007 | Microsoft.SignalRService/SignalR | Governance | Low | SignalR should have tags | Learn |
| 248 | sql-004 | Microsoft.Sql/servers | Security | High | SQL should have private endpoints enabled | Learn |
| 249 | sql-006 | Microsoft.Sql/servers | Governance | Low | SQL Name should comply with naming conventions | Learn |
| 250 | sql-007 | Microsoft.Sql/servers | Governance | Low | SQL should have tags | Learn |
| 251 | sql-008 | Microsoft.Sql/servers | Security | Low | SQL should enforce TLS >= 1.2 | Learn |
| 252 | sqldb-001 | Microsoft.Sql/servers/databases | MonitoringAndAlerting | Low | SQL Database should have diagnostic settings enabled | Learn |
| 253 | sqldb-003 | Microsoft.Sql/servers/databases | HighAvailability | High | SQL Database should have a SLA | Learn |
| 254 | sqldb-006 | Microsoft.Sql/servers/databases | Governance | Low | SQL Database Name should comply with naming conventions | Learn |
| 255 | sqldb-007 | Microsoft.Sql/servers/databases | Governance | Low | SQL Database should have tags | Learn |
| 256 | sqlep-002 | Microsoft.Sql/servers/elasticPools | Governance | Low | SQL Elastic Pool Name should comply with naming conventions | Learn |
| 257 | sqlep-003 | Microsoft.Sql/servers/elasticPools | Governance | Low | SQL Elastic Pool should have tags | Learn |
| 258 | srch-001 | Microsoft.Search/searchServices | Governance | Low | Azure AI Search name should comply with naming conventions | Learn |
| 259 | srch-002 | Microsoft.Search/searchServices | HighAvailability | High | Azure AI Search SLA | Learn |
| 260 | srch-003 | Microsoft.Search/searchServices | Governance | Low | Azure AI Search should have tags | Learn |
| 261 | srch-004 | Microsoft.Search/searchServices | Security | High | Azure AI Search should disable public network access | Learn |
| 262 | srch-005 | Microsoft.Search/searchServices | Security | High | Azure AI Search should have private enpoints enabled | Learn |
| 263 | srch-006 | Microsoft.Search/searchServices | MonitoringAndAlerting | Low | Azure AI Search should have diagnostic settings enabled | Learn |
| 264 | st-001 | Microsoft.Storage/storageAccounts | MonitoringAndAlerting | Low | Storage should have diagnostic settings enabled | Learn |
| 265 | st-003 | Microsoft.Storage/storageAccounts | HighAvailability | High | Storage should have a SLA | Learn |
| 266 | st-006 | Microsoft.Storage/storageAccounts | Governance | Low | Storage Name should comply with naming conventions | Learn |
| 267 | st-007 | Microsoft.Storage/storageAccounts | Security | High | Storage Account should use HTTPS only | Learn |
| 268 | st-008 | Microsoft.Storage/storageAccounts | Governance | Low | Storage Account should have tags | Learn |
| 269 | st-009 | Microsoft.Storage/storageAccounts | Security | Low | Storage Account should enforce TLS >= 1.2 | Learn |
| 270 | st-010 | Microsoft.Storage/storageAccounts | DisasterRecovery | Low | Storage Account should have inmutable storage versioning enabled | Learn |
| 271 | st-011 | Microsoft.Storage/storageAccounts | DisasterRecovery | Medium | Storage Account should have soft delete enabled | Learn |
| 272 | syndp-001 | Microsoft.Synapse/workspaces/sqlPools | Governance | Low | Azure Synapse Dedicated SQL Pool Name should comply with naming conventions | Learn |
| 273 | syndp-002 | Microsoft.Synapse/workspaces/sqlPools | HighAvailability | High | Azure Synapse Dedicated SQL Pool SLA | Learn |
| 274 | syndp-003 | Microsoft.Synapse/workspaces/sqlPools | Governance | Low | Azure Synapse Dedicated SQL Pool should have tags | Learn |
| 275 | synsp-001 | Microsoft.Synapse workspaces/bigDataPools | Governance | Low | Azure Synapse Spark Pool Name should comply with naming conventions | Learn |
| 276 | synsp-002 | Microsoft.Synapse workspaces/bigDataPools | HighAvailability | High | Azure Synapse Spark Pool SLA | Learn |
| 277 | synsp-003 | Microsoft.Synapse workspaces/bigDataPools | Governance | Low | Azure Synapse Spark Pool should have tags | Learn |
| 278 | synw-001 | Microsoft.Synapse/workspaces | MonitoringAndAlerting | Low | Azure Synapse Workspace should have diagnostic settings enabled | Learn |
| 279 | synw-002 | Microsoft.Synapse/workspaces | Security | High | Azure Synapse Workspace should have private endpoints enabled | Learn |
| 280 | synw-003 | Microsoft.Synapse/workspaces | HighAvailability | High | Azure Synapse Workspace SLA | Learn |
| 281 | synw-004 | Microsoft.Synapse/workspaces | Governance | Low | Azure Synapse Workspace Name should comply with naming conventions | Learn |
| 282 | synw-005 | Microsoft.Synapse/workspaces | Governance | Low | Azure Synapse Workspace should have tags | Learn |
| 283 | synw-006 | Microsoft.Synapse/workspaces | Security | High | Azure Synapse Workspace should establish network segmentation boundaries | Learn |
| 284 | synw-007 | Microsoft.Synapse/workspaces | Security | High | Azure Synapse Workspace should disable public network access | Learn |
| 285 | traf-001 | Microsoft.Network/trafficManagerProfiles | MonitoringAndAlerting | Low | Traffic Manager should have diagnostic settings enabled | Learn |
| 286 | traf-002 | Microsoft.Network/trafficManagerProfiles | HighAvailability | High | Traffic Manager should have availability zones enabled | Learn |
| 287 | traf-003 | Microsoft.Network/trafficManagerProfiles | HighAvailability | High | Traffic Manager should have a SLA | Learn |
| 288 | traf-006 | Microsoft.Network/trafficManagerProfiles | Governance | Low | Traffic Manager Name should comply with naming conventions | Learn |
| 289 | traf-007 | Microsoft.Network/trafficManagerProfiles | Governance | Low | Traffic Manager should have tags | Learn |
| 290 | traf-009 | Microsoft.Network/trafficManagerProfiles | Security | High | Traffic Manager: HTTP endpoints should be monitored using HTTPS | Learn |
| 291 | udr-003 | Microsoft.Network/routeTables | HighAvailability | High | Rout Table SLA | Learn |
| 292 | udr-006 | Microsoft.Network/routeTables | Governance | Low | Rout Table Name should comply with naming conventions | Learn |
| 293 | udr-007 | Microsoft.Network/routeTables | Governance | Low | Rout Table should have tags | Learn |
| 294 | vgw-001 | Microsoft.Network/virtualNetworkGateways | MonitoringAndAlerting | Low | Virtual Network Gateway should have diagnostic settings enabled | Learn |
| 295 | vgw-002 | Microsoft.Network/virtualNetworkGateways | Governance | Low | Virtual Network Gateway Name should comply with naming conventions | Learn |
| 296 | vgw-003 | Microsoft.Network/virtualNetworkGateways | Governance | Low | Virtual Network Gateway should have tags | Learn |
| 297 | vgw-004 | Microsoft.Network/virtualNetworkGateways | HighAvailability | High | Virtual Network Gateway should have a SLA | Learn |
| 298 | vgw-005 | Microsoft.Network/virtualNetworkGateways | HighAvailability | High | Storage should have availability zones enabled | Learn |
| 299 | vm-003 | Microsoft.Compute/virtualMachines | HighAvailability | High | Virtual Machine should have a SLA | Learn |
| 300 | vm-006 | Microsoft.Compute/virtualMachines | Governance | Low | Virtual Machine Name should comply with naming conventions | Learn |
| 301 | vm-007 | Microsoft.Compute/virtualMachines | Governance | Low | Virtual Machine should have tags | Learn |
| 302 | vmss-003 | Microsoft.Compute/virtualMachineScaleSets | HighAvailability | High | Virtual Machine should have a SLA | Learn |
| 303 | vmss-004 | Microsoft.Compute/virtualMachineScaleSets | Governance | Low | Virtual Machine Scale Set Name should comply with naming conventions | Learn |
| 304 | vmss-005 | Microsoft.Compute/virtualMachineScaleSets | Governance | Low | Virtual Machine Scale Set should have tags | Learn |
| 305 | vnet-001 | Microsoft.Network/virtualNetworks | MonitoringAndAlerting | Low | Virtual Network should have diagnostic settings enabled | Learn |
| 306 | vnet-006 | Microsoft.Network/virtualNetworks | Governance | Low | Virtual Network Name should comply with naming conventions | Learn |
| 307 | vnet-007 | Microsoft.Network/virtualNetworks | Governance | Low | Virtual Network should have tags | Learn |
| 308 | vnet-009 | Microsoft.Network/virtualNetworks | HighAvailability | High | Virtual Network should have at least two DNS servers assigned | Learn |
| 309 | vwa-001 | Microsoft.Network/virtualWans | MonitoringAndAlerting | Medium | Virtual WAN should have diagnostic settings enabled | Learn |
| 310 | vwa-002 | Microsoft.Network/virtualWans | HighAvailability | High | Virtual WAN should have availability zones enabled | Learn |
| 311 | vwa-003 | Microsoft.Network/virtualWans | HighAvailability | High | Virtual WAN should have a SLA | Learn |
| 312 | vwa-005 | Microsoft.Network/virtualWans | HighAvailability | High | Virtual WAN Type | Learn |
| 313 | vwa-006 | Microsoft.Network/virtualWans | Governance | Low | Virtual WAN Name should comply with naming conventions | Learn |
| 314 | vwa-007 | Microsoft.Network/virtualWans | Governance | Low | Virtual WAN should have tags | Learn |
| 315 | wps-001 | Microsoft.SignalRService/webPubSub | MonitoringAndAlerting | Low | Web Pub Sub should have diagnostic settings enabled | Learn |
| 316 | wps-002 | Microsoft.SignalRService/webPubSub | HighAvailability | High | Web Pub Sub should have availability zones enabled | Learn |
| 317 | wps-003 | Microsoft.SignalRService/webPubSub | HighAvailability | High | Web Pub Sub should have a SLA | Learn |
| 318 | wps-004 | Microsoft.SignalRService/webPubSub | Security | High | Web Pub Sub should have private endpoints enabled | Learn |
| 319 | wps-006 | Microsoft.SignalRService/webPubSub | Governance | Low | Web Pub Sub Name should comply with naming conventions | Learn |
| 320 | wps-007 | Microsoft.SignalRService/webPubSub | Governance | Low | Web Pub Sub should have tags | Learn |
| 321 | 005ccbbd-aeab-46ef-80bd-9bd4479412ec | Microsoft.ContainerService/managedClusters | HighAvailability | High | Configure user nodepool count | Learn |
| 322 | 029208c8-5186-4a76-8ee8-6e3445fef4dd | Microsoft.AVS/privateClouds | MonitoringAndAlerting | High | Monitor Memory Utilization to ensure sufficient resources for workloads | Learn |
| 323 | 03f4a7d8-c5b4-7842-8e6e-14997a34842b | Microsoft.ContainerRegistry/registries | OtherBestPractices | Medium | Disable anonymous pull access | Learn |
| 324 | 0611251f-e70f-4243-8ddd-cfe894bec2e7 | Microsoft.ContainerService/managedClusters | HighAvailability | High | Update AKS tier to Standard or Premium | Learn |
| 325 | 06b77be9-56a3-4d41-b362-8b295c5a283d | Microsoft.Network/virtualNetworks | MonitoringAndAlerting | Medium | Enable Virtual Network Flow Logs | Learn |
| 326 | 0b80b67c-afbe-4988-ad58-a85a146b681e | Microsoft.Web/sites | OtherBestPractices | Medium | Store configuration as app settings for Web Sites | Learn |
| 327 | 0bee356b-7348-4799-8cab-0c71ffe13018 | Microsoft.Network/ExpressRoutePorts | Scalability | Medium | Ensure ExpressRoute Direct is not over-subscribed | Learn |
| 328 | 0d1e2f3a-4b5c-6d7e-8f9a-0b1c2d3e4f5a | Microsoft.Network/frontDoorWebApplicationFirewallPolicies | Governance | Medium | Front Door WAF Policy without associations | Learn |
| 329 | 10f02bc6-e2e7-004d-a2c2-f9bf9f16b915 | Microsoft.Network/applicationGateways | HighAvailability | Medium | Plan for backend maintenance by using connection draining | Learn |
| 330 | 122d11d7-b91f-8747-a562-f56b79bcfbdc | Microsoft.Compute/virtualMachines | HighAvailability | High | Use Managed Disks for VM disks | Learn |
| 331 | 13794a63-8d95-47ce-acbd-5925ede5b208 | Microsoft.MachineLearningServices/workspaces | DisasterRecovery | High | Ensure to create Machine Learning Compute resources in secondary region | Learn |
| 332 | 1422c567-782c-7148-ac7c-5fc14cf45adc | Microsoft.Compute/virtualMachineScaleSets | HighAvailability | High | Deploy VMSS across availability zones with VMSS Flex | Learn |
| 333 | 1549b91f-2ea0-4d4f-ba2a-4596becbe3de | Microsoft.RecoveryServices/vaults | DisasterRecovery | Medium | Enable Cross Region Restore for your GRS Recovery Services Vault | Learn |
| 334 | 17e877f7-3a89-4205-8a24-0670de54ddcd | Microsoft.Compute/virtualMachines | DisasterRecovery | High | Validate VM functionality with a Site Recovery test failover to check performance at target | Learn |
| 335 | 1981f704-97b9-b645-9c57-33f8ded9261a | Microsoft.Compute/virtualMachines | DisasterRecovery | Medium | Backup VMs with Azure Backup service | Learn |
| 336 | 1a2b3c4d-5e6f-7a8b-9c0d-1e2f3a4b5c6d | Microsoft.Web/serverFarms | Governance | Medium | App Service plans without hosting Apps | Learn |
| 337 | 1adba190-5c4c-e646-8527-dd1b2a6d8b15 | Microsoft.Network/publicIPAddresses | HighAvailability | Medium | Use NAT gateway for outbound connectivity to avoid SNAT Exhaustion | Learn |
| 338 | 1c2d3e4f-5a6b-7c8d-9e0f-1a2b3c4d5e6f | Microsoft.Resources/resourceGroups | Governance | Medium | Resource Groups without resources | Learn |
| 339 | 1cca00d2-d9ab-8e42-a788-5d40f49405cb | Microsoft.KeyVault/vaults | DisasterRecovery | High | Key vaults should have soft delete enabled | Learn |
| 340 | 1e28bbc1-1eb7-486f-8d7f-93943f40219c | Microsoft.Network/networkWatchers | MonitoringAndAlerting | Medium | Configure Network Watcher Connection monitor | Learn |
| 341 | 1e2f3a4b-5c6d-7e8f-9a0b-1c2d3e4f5a6b | Microsoft.Network/trafficManagerProfiles | Governance | Medium | Traffic Manager without endpoints | Learn |
| 342 | 2102a57a-a056-4d5e-afe5-9df9f92177ca | Microsoft.AppConfiguration/configurationStores | HighAvailability | High | Upgrade to App Configuration Standard tier | Learn |
| 343 | 21fb841b-ba70-1f4e-a460-1f72fb41aa51 | Microsoft.VirtualMachineImages/imageTemplates | DisasterRecovery | Low | Replicate your Image Templates to a secondary region | Learn |
| 344 | 23b2dfc7-7e5d-9443-9f62-980ca621b561 | Microsoft.Network/routeTables | MonitoringAndAlerting | Medium | Monitor changes in Route Tables with Azure Monitor | Learn |
| 345 | 269a9f1a-6675-460a-831e-b05a887a8c4b | Microsoft.ContainerService/managedClusters | DisasterRecovery | Low | Back up Azure Kubernetes Service | Learn |
| 346 | 273f6b30-68e0-4241-85ea-acf15ffb60bf | Microsoft.Compute/virtualMachines | HighAvailability | High | Run production workloads on two or more VMs using VMSS Flex | Learn |
| 347 | 281a2713-c0e0-3c48-b596-19f590c46671 | Microsoft.Network/virtualNetworkGateways | HighAvailability | Medium | Enable Active-Active VPN Gateways for redundancy | Learn |
| 348 | 2912472d-0198-4bdc-aa90-37f145790edc | Microsoft.RecoveryServices/vaults | MonitoringAndAlerting | Medium | Migrate from classic alerts to built-in Azure Monitor alerts for Azure Recovery Services Vaults | Learn |
| 349 | 2ab85a67-26be-4ed2-a0bb-101b2513ec63 | Microsoft.DBforPostgreSQL/flexibleServers | DisasterRecovery | High | Configure one or more read replicas | Learn |
| 350 | 2ad78dec-5a4d-4a30-8fd1-8584335ad781 | Microsoft.Storage/storageAccounts | Scalability | Low | Consider upgrading legacy storage accounts to v2 storage accounts | Learn |
| 351 | 2b3c4d5e-6f7a-8b9c-0d1e-2f3a4b5c6d7e | Microsoft.Compute/availabilitySets | Governance | Medium | Availability Sets not associated to any VM or VMSS | Learn |
| 352 | 2bd0be95-a825-6f47-a8c6-3db1fb5eb387 | Microsoft.Compute/virtualMachines | HighAvailability | High | Deploy VMs across Availability Zones | Learn |
| 353 | 2d3e4f5a-6b7c-8d9e-0f1a-2b3c4d5e6f7a | Microsoft.Web/connections | Governance | Medium | API Connections not related to any Logic App | Learn |
| 354 | 2f3a4b5c-6d7e-8f9a-0b1c-2d3e4f5a6b7c | Microsoft.Network/applicationGateways | Governance | Medium | Application Gateways without backend targets | Learn |
| 355 | 302fda08-ee65-4fbe-a916-6dc0b33169c4 | Microsoft.Compute/virtualMachines | HighAvailability | High | Reserve Compute Capacity for critical workloads | Learn |
| 356 | 31f4ac4b-29cb-4588-8de2-d8fe6f13ceb3 | Microsoft.DBforPostgreSQL/flexibleServers | DisasterRecovery | High | Configure geo redundant backup storage | Learn |
| 357 | 3201dba8-d1da-4826-98a4-104066545170 | Microsoft.Compute/virtualMachines | Scalability | High | Don’t use A or B-Series VMs for production needing constant full CPU performance | Learn |
| 358 | 3263a64a-c256-de48-9818-afd3cbc55c2a | Microsoft.Compute/disks | OtherBestPractices | Medium | Shared disks should only be enabled in clustered servers | Learn |
| 359 | 3538aa48-c40b-455b-a93b-269fe6e65be2 | Microsoft.Network/privateDnsZones | DisasterRecovery | Medium | Ensure Time-To-Live (TTL) is set appropriately to ensure RTOs can be met | Learn |
| 360 | 36ea6c09-ef6e-d743-9cfb-bd0c928a430b | Microsoft.ContainerRegistry/registries | DisasterRecovery | High | Create container registries with geo-replication enabled | Learn |
| 361 | 38c3bca1-97a1-eb42-8cd3-838b243f35ba | Microsoft.Network/loadBalancers | HighAvailability | High | Use Standard Load Balancer SKU | Learn |
| 362 | 3a4b5c6d-7e8f-9a0b-1c2d-3e4f5a6b7c8d | Microsoft.Network/virtualNetworks | Governance | Medium | Virtual Networks without subnets | Learn |
| 363 | 3c4d5e6f-7a8b-9c0d-1e2f-3a4b5c6d7e8f | Microsoft.Compute/disks | Governance | Medium | Managed Disks with ‘Unattached’ state | Learn |
| 364 | 3c8fa7c6-6b78-a24a-a63f-348a7c71acb9 | Microsoft.Network/azureFirewalls | MonitoringAndAlerting | High | Monitor Azure Firewall metrics | Learn |
| 365 | 3e115044-a3aa-433e-be01-ce17d67e50da | Microsoft.Network/virtualNetworkGateways | HighAvailability | Medium | Configure customer-controlled ExpressRoute gateway maintenance | Learn |
| 366 | 3e4f5a6b-7c8d-9e0f-1a2b-3c4d5e6f7a8b | Microsoft.Web/certificates | Governance | Medium | Expired certificates | Learn |
| 367 | 3f85a51c-e286-9f44-b4dc-51d00768696c | Microsoft.Compute/virtualMachineScaleSets | Scalability | Low | Enable Predictive autoscale and configure at least for Forecast Only | Learn |
| 368 | 41a22a5e-5e08-9647-92d0-2ffe9ef1bdad | Microsoft.Compute/virtualMachines | OtherBestPractices | Medium | IP Forwarding should only be enabled for Network Virtual Appliances | Learn |
| 369 | 4232eb32-3241-4049-9e14-9b8005817b56 | Microsoft.AVS/privateClouds | MonitoringAndAlerting | High | Configure Azure Monitor Alert warning thresholds for vSAN datastore utilization | Learn |
| 370 | 43663217-a1d3-844b-80ea-571a2ce37c6c | Microsoft.DocumentDB/databaseAccounts | HighAvailability | High | Configure at least two regions for high availability | Learn |
| 371 | 48ea6480-6263-40ba-8937-326d790e63f6 | Microsoft.MachineLearningServices/workspaces | OtherBestPractices | High | Make Azure Machine Learning quota requests through the Azure Machine Learning Studio | Learn |
| 372 | 4b33324a-70cd-4bac-bdae-da4c382c436b | Oracle.Database/cloudVmClusters | OtherBestPractices | High | Ensure ODAA clusters are in Available state under normal operations | Learn |
| 373 | 4b5c6d7e-8f9a-0b1c-2d3e-4f5a6b7c8d9e | Microsoft.Network/virtualNetworks/subnets | Governance | Medium | Subnets without Connected Devices or Delegation | Learn |
| 374 | 4bae5a28-5cf4-40d9-bcf1-623d28f6d917 | Microsoft.Network/virtualNetworkGateways | HighAvailability | High | Deploy VPN gateways with zone-redundant Public IPs | Learn |
| 375 | 4d5e6f7a-8b9c-0d1e-2f3a-4b5c6d7e8f9a | Microsoft.Sql/servers/elasticpools | Governance | Medium | SQL elastic pool without databases | Learn |
| 376 | 4e133bd0-8762-bc40-a95b-b29142427d73 | Microsoft.Network/networkWatchers | MonitoringAndAlerting | Low | Deploy Network Watcher in all regions where you have networking services | Learn |
| 377 | 4ee5d535-c47b-470a-9557-4a3dd297d62f | Microsoft.AVS/privateClouds | MonitoringAndAlerting | High | Monitor CPU Utilization to ensure sufficient resources for workloads | Learn |
| 378 | 4f63619f-5001-439c-bacb-8de891287727 | Microsoft.ContainerService/managedClusters | HighAvailability | High | Deploy AKS cluster across availability zones | Learn |
| 379 | 52ab9e5c-eec0-3148-8bd7-b6dd9e1be870 | Microsoft.Compute/virtualMachines | HighAvailability | Medium | Use maintenance configurations for the Dedicated and/or Isolated VM SKUs | Learn |
| 380 | 5a44bd30-ae6a-4b81-9b68-dc3a8ffca4d8 | Microsoft.Cache/Redis | HighAvailability | High | Enable zone redundancy for Azure Cache for Redis | Learn |
| 381 | 5b1933a6-90e4-f642-a01f-e58594e5aab2 | Microsoft.Network/virtualNetworkGateways | HighAvailability | High | Choose a Zone-redundant VPN gateway | Learn |
| 382 | 5b422a7f-8caa-3d48-becb-511599e5bba9 | Microsoft.Network/trafficManagerProfiles | HighAvailability | Medium | Traffic manager profiles should have more than one endpoint | Learn |
| 383 | 5c6d7e8f-9a0b-1c2d-3e4f-5a6b7c8d9e0f | Microsoft.Network/natGateways | Governance | Medium | NAT Gateways not attached to any subnet | Learn |
| 384 | 5c96afc3-7d2e-46ff-a4c7-9c32850c441b | Microsoft.DBforMySQL/flexibleServers | DisasterRecovery | High | Configure geo redundant backup storage | Learn |
| 385 | 5cea1501-6fe4-4ec4-ac8f-f72320eb18d3 | Microsoft.Network/publicIPAddresses | HighAvailability | Medium | Upgrade Basic SKU public IP addresses to Standard SKU | Learn |
| 386 | 5e6f7a8b-9c0d-1e2f-3a4b-5c6d7e8f9a0b | Microsoft.Network/publicIPAddresses | Governance | Medium | Public IPs not attached to any resource | Learn |
| 387 | 5ee083cd-6ac3-4a83-8913-9549dd36cf56 | Microsoft.ContainerService/managedClusters | HighAvailability | High | Isolate system and application pods | Learn |
| 388 | 60077378-7cb1-4b35-89bb-393884d9921d | Microsoft.Network/ExpressRoutePorts | HighAvailability | High | The Admin State of both Links of an ExpressRoute Direct should be in Enabled state | Learn |
| 389 | 621dbc78-3745-4d32-8eac-9e65b27b7512 | Microsoft.Network/loadBalancers | HighAvailability | High | Ensure Standard Load Balancer is zone-redundant | Learn |
| 390 | 6293a3cc-6b4a-4c0f-9ea7-b8ae8d7dd3d5 | Microsoft.DBforPostgreSQL/flexibleServers | Scalability | High | Configure storage auto-grow | Learn |
| 391 | 63491f70-22e4-3b4a-8b0c-845450e46fac | Microsoft.ContainerRegistry/registries | HighAvailability | Medium | Enable zone redundancy | Learn |
| 392 | 675d249a-9486-45e3-8e89-863f5802782d | Microsoft.MachineLearningServices/workspaces | DisasterRecovery | High | Deploy Azure Machine learning workspace in secondary region | Learn |
| 393 | 6a8b3db9-5773-413a-a127-4f7032f34bbd | Microsoft.SignalRService/SignalR | HighAvailability | High | Enable zone redundancy for SignalR | Learn |
| 394 | 6cd57b65-ef84-4088-9ada-c0d8de74c2f7 | Microsoft.Dashboard/grafana | HighAvailability | Medium | Enable zone redundancy in Managed Grafana | Learn |
| 395 | 6d7e8f9a-0b1c-2d3e-4f5a-6b7c8d9e0f1a | Microsoft.Network/ipGroups | Governance | Medium | IP Groups not attached to any Azure Firewall | Learn |
| 396 | 6d82d042-6d61-ad49-86f0-6a5455398081 | Microsoft.Network/loadBalancers | HighAvailability | High | Ensure the Backend Pool contains at least two instances | Learn |
| 397 | 6e2af91f-477d-46a5-b8ce-6cd1b8176550 | Microsoft.MachineLearningServices/workspaces | ServiceUpgradeAndRetirement | Medium | Choose SKUs with longer terms and avoid those nearing retirement | Learn |
| 398 | 6e4f0fd1-1853-4b94-9736-6d6d239d2694 | Microsoft.MachineLearningServices/workspaces | DisasterRecovery | High | Selecting regions for BCDR, ensure that both regions offer adequate compute quotas | Learn |
| 399 | 6f7a8b9c-0d1e-2f3a-4b5c-6d7e8f9a0b1c | Microsoft.Network/networkInterfaces | Governance | Medium | Network Interfaces not attached to any resource | Learn |
| 400 | 70fcfe6d-00e9-5544-a63a-fff42b9f2edb | Microsoft.KeyVault/vaults | DisasterRecovery | Medium | Key vaults should have purge protection enabled | Learn |
| 401 | 73d1bb04-7d3e-0d47-bc0d-63afe773b5fe | Microsoft.Compute/virtualMachines | OtherBestPractices | Low | When AccelNet is enabled, you must manually update the GuestOS NIC driver | Learn |
| 402 | 740f2c1c-8857-4648-80eb-47d2c56d5a50 | Microsoft.ApiManagement/service | HighAvailability | High | Enable Availability Zones on Premium API Management instances | Learn |
| 403 | 7893f0b3-8622-1d47-beed-4b50a19f7895 | Microsoft.Network/applicationGateways | Scalability | High | Migrate to Application Gateway v2 | Learn |
| 404 | 7a8b9c0d-1e2f-3a4b-5c6d-7e8f9a0b1c2d | Microsoft.Network/networkSecurityGroups | Governance | Medium | Network Security Groups not attached to any network interface or subnet | Learn |
| 405 | 7e8f9a0b-1c2d-3e4f-5a6b-7c8d9e0f1a2b | Microsoft.Network/privateDnsZones | Governance | Medium | Private DNS zones without Virtual Network Links | Learn |
| 406 | 7f7ae535-a5ba-4665-b7e0-c451dbdda01f | Microsoft.ContainerService/managedClusters | HighAvailability | High | Configure system nodepool count | Learn |
| 407 | 8176a79d-8645-4e52-96be-a10fc0204fe5 | Microsoft.DBforMySQL/flexibleServers | Scalability | High | Configure storage auto-grow | Learn |
| 408 | 820f4743-1f94-e946-ae0b-45efafd87962 | Microsoft.Compute/virtualMachineScaleSets | HighAvailability | High | Enable Automatic Repair Policy on Azure Virtual Machine Scale Sets | Learn |
| 409 | 823b0cff-05c0-2e4e-a1e7-9965e1cfa16f | Microsoft.Network/applicationGateways | Scalability | Medium | Ensure Autoscale feature has been enabled | Learn |
| 410 | 8364fd0a-7c0e-e240-9d95-4bf965aec243 | Microsoft.Network/applicationGateways | OtherBestPractices | High | A minimum subnet size of /24 is recommended for Application Gateway v2 subnets. | Learn |
| 411 | 84636c6c-b317-4722-b603-7b1ffc16384b | Microsoft.EventHub/namespaces | HighAvailability | High | Ensure zone redundancy is enabled in supported regions | Learn |
| 412 | 847a8d88-21c4-bc48-a94e-562206edd767 | Microsoft.Network/applicationGateways | MonitoringAndAlerting | High | Use Health Probes to detect backend availability | Learn |
| 413 | 855ca19a-6518-4f2e-9e5a-01796fbca9f8 | Microsoft.Web/serverFarms | Scalability | High | Set minimum instance count to 2 for app service | Learn |
| 414 | 88856605-53d8-4bbd-a75b-4a7b14939d32 | Microsoft.DBforMySQL/flexibleServers | HighAvailability | High | Enable HA with zone redundancy | Learn |
| 415 | 88cb90c2-3b99-814b-9820-821a63f600dd | Microsoft.Web/serverFarms | HighAvailability | High | Migrate App Service to availability Zone Support | Learn |
| 416 | 8b9c0d1e-2f3a-4b5c-6d7e-8f9a0b1c2d3e | Microsoft.Network/routeTables | Governance | Medium | Route Tables not attached to any subnet | Learn |
| 417 | 8bb4a57b-55e4-d24e-9c19-2679d8bc779f | Microsoft.Network/networkSecurityGroups | MonitoringAndAlerting | Low | Monitor changes in Network Security Groups with Azure Monitor | Learn |
| 418 | 8d319a05-677b-944f-b9b4-ca0fb42e883c | Microsoft.Network/loadBalancers | HighAvailability | Medium | Use NAT Gateway instead of Outbound Rules for Production Workloads | Learn |
| 419 | 8f9a0b1c-2d3e-4f5a-6b7c-8d9e0f1a2b3c | Microsoft.Network/privateEndpoints | Governance | Medium | Private Endpoints not connected to any resource | Learn |
| 420 | 902c82ff-4910-4b61-942d-0d6ef7f39b67 | Microsoft.ContainerService/managedClusters | Scalability | High | Enable the cluster auto-scaler on an existing cluster | Learn |
| 421 | 921631f6-ed59-49a5-94c1-f0f3ececa580 | Microsoft.DocumentDB/databaseAccounts | HighAvailability | High | Enable availability zones | Learn |
| 422 | 9437634c-d69e-2747-b13e-631c13182150 | Microsoft.Network/trafficManagerProfiles | BusinessContinuity | High | Avoid combining Traffic Manager and Front Door | Learn |
| 423 | 94794d2a-eff0-2345-9b67-6f9349d0a627 | Microsoft.Compute/virtualMachineScaleSets | MonitoringAndAlerting | Medium | Enable Azure Virtual Machine Scale Set Application Health Monitoring | Learn |
| 424 | 979ff8be-5f3a-4d8e-9aa3-407ecdd6d6f7 | Microsoft.DesktopVirtualization/hostPools | OtherBestPractices | Medium | Configure host pool scheduled agent updates | Learn |
| 425 | 98f15850-f31e-4fb2-8874-74f5aabbcf91 | Microsoft.MachineLearningServices/workspaces | DisasterRecovery | High | Ensure checkpoints are used for AI training models | Learn |
| 426 | 9a0b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d | Microsoft.Network/virtualNetworkGateways | Governance | Medium | Virtual Network Gateways without Point-to-site configuration or Connections | Learn |
| 427 | 9c0d1e2f-3a4b-5c6d-7e8f-9a0b1c2d3e4f | Microsoft.Network/loadBalancers | Governance | Medium | Load Balancers with empty backend address pools | Learn |
| 428 | 9cabded7-a1fc-6e4a-944b-d7dd98ea31a2 | Microsoft.DocumentDB/databaseAccounts | DisasterRecovery | High | Enable service-managed failover for multi-region accounts with single write region | Learn |
| 429 | 9ce78192-74a0-104c-b5bb-9a443f941649 | Microsoft.DocumentDB/databaseAccounts | HighAvailability | High | Evaluate multi-region write capability | Learn |
| 430 | 9e39919b-78af-4a0b-b70f-c548dae97c25 | Microsoft.RecoveryServices/vaults | DisasterRecovery | Medium | Enable Soft Delete for Recovery Services Vaults in Azure Backup | Learn |
| 431 | 9ec5b4c8-3dd8-473a-86ee-3273290331b9 | Microsoft.AVS/privateClouds | HighAvailability | Low | Enable Stretched Clusters for Multi-AZ Availability of the vSAN Datastore | Learn |
| 432 | a1d91661-32d4-430b-b3b6-5adeb0975df7 | Microsoft.Web/sites | OtherBestPractices | Low | Deploy to a staging slot | Learn |
| 433 | a7bfcc18-b0d8-4d37-81f3-8131ed8bead5 | Microsoft.Compute/virtualMachineScaleSets | Scalability | Medium | Use Ephemeral OS Disks for AKS VMSS Node Pools | Learn |
| 434 | a86ed26a-59d9-47bd-b440-6bc71b843978 | Microsoft.MachineLearningServices/workspaces | DisasterRecovery | High | Plan for a multi-regional deployment of Azure Machine Learning and associated resources | Learn |
| 435 | a8d25876-7951-b646-b4e8-880c9031596b | Microsoft.Compute/virtualMachines | HighAvailability | High | Migrate VMs using availability sets to VMSS Flex | Learn |
| 436 | b002c030-72e6-4a37-8217-1cb276c43169 | Microsoft.ContainerService/managedClusters | OtherBestPractices | High | Upgrade Persistent Volumes using in-tree drivers to Azure CSI drivers | Learn |
| 437 | b1e1378d-4572-4414-bebd-b8872a6d4d1c | Microsoft.Devices/IotHubs | Scalability | High | Use Device Provisioning Service | Learn |
| 438 | b2113023-a553-2e41-9789-597e2fb54c31 | Microsoft.Web/serverFarms | HighAvailability | High | Use Standard or Premium tier | Learn |
| 439 | b2bad57d-7e03-4c0f-9024-597c9eb295bb | Microsoft.DBforPostgreSQL/flexibleServers | Scalability | High | Enable custom maintenance schedule | Learn |
| 440 | b376281d-bfec-4695-8f90-9a44544fdfa4 | Microsoft.Search/searchServices | HighAvailability | High | Enable AZ support in AI Search by configuring multiple replicas to your search service | Learn |
| 441 | b49a8653-cc43-48c9-8513-a2d2e3f14dd1 | Microsoft.DBforMySQL/flexibleServers | DisasterRecovery | High | Configure one or more read replicas | Learn |
| 442 | b5a63aa0-c58e-244f-b8a6-cbba0560a6db | Microsoft.Compute/virtualMachineScaleSets | HighAvailability | High | Disable Force strictly even balance across zones to avoid scale in and out fail attempts | Learn |
| 443 | b72214bb-e879-5f4b-b9cd-642db84f36f4 | Microsoft.Compute/virtualMachines | MonitoringAndAlerting | Low | Enable VM Insights | Learn |
| 444 | b89c9acc-0aba-fb44-9ff2-3dbfcf97dce7 | Microsoft.Network/privateEndpoints | HighAvailability | Medium | Resolve issues with Private Endpoints in non Succeeded connection state | Learn |
| 445 | baf3bfc0-32a2-4c0c-926d-c9bf0b49808e | Microsoft.ApiManagement/service | HighAvailability | High | Migrate API Management services to Premium SKU to support Availability Zones | Learn |
| 446 | bb4c8db4-f821-475b-b1ea-16e95358665e | Microsoft.AppConfiguration/configurationStores | OtherBestPractices | Low | Enable Purge protection for Azure App Configuration | Learn |
| 447 | bbe668b7-eb5c-c746-8b82-70afdedf0cae | Microsoft.Network/virtualNetworkGateways | HighAvailability | High | Use Zone-redundant ExpressRoute gateway SKUs | Learn |
| 448 | c0085c32-84c0-c247-bfa9-e70977cbf108 | Microsoft.Sql/servers/databases | HighAvailability | High | Enable zone redundancy for Azure SQL Database to achieve high availability and resiliency | Learn |
| 449 | c22db132-399b-4e7c-995d-577a60881be8 | Microsoft.ContainerService/managedClusters | Scalability | Medium | Configure Azure CNI networking for dynamic allocation of IPs or use CNI overlay | Learn |
| 450 | c31f76a0-48cd-9f44-aa43-99ee904db9bc | Microsoft.Network/trafficManagerProfiles | DisasterRecovery | High | Ensure endpoint configured to (All World) for geographic profiles | Learn |
| 451 | c63b81fb-7afc-894c-a840-91bb8a8dcfaf | Microsoft.Network/publicIPAddresses | HighAvailability | High | Use Standard SKU and Zone-Redundant IPs when applicable | Learn |
| 452 | c6c4b962-5af4-447a-9d74-7b9c53a5dff5 | Microsoft.Web/sites | HighAvailability | Low | Enable auto heal for Functions App | Learn |
| 453 | c72b7fee-1fa0-5b4b-98e5-54bcae95bb74 | Microsoft.Network/azureFirewalls | HighAvailability | High | Deploy Azure Firewall across multiple availability zones | Learn |
| 454 | c99d730b-8754-447f-bd5d-3e8850a12235 | Oracle.Database/cloudExadataInfrastructures | OtherBestPractices | High | Ensure ODAA infrastructure is in Available state under normal operations | Learn |
| 455 | c9c00f2a-3888-714b-a72b-b4c9e8fcffb2 | Microsoft.Network/applicationGateways | HighAvailability | High | Deploy Application Gateway in a zone-redundant configuration | Learn |
| 456 | ca87914f-aac4-4783-ab67-82a6f936f194 | Microsoft.DBforPostgreSQL/flexibleServers | HighAvailability | High | Enable HA with zone redundancy | Learn |
| 457 | cf2569bb-1cf2-46ce-8885-d742dc6f4a4c | Microsoft.MachineLearningServices/workspaces | ServiceUpgradeAndRetirement | High | Avoid NC and NC_Promo series Azure VMs for machine learning quotas; migrate to newer versions | Learn |
| 458 | cfe22a65-b1db-fd41-9e8e-d573922709ae | Microsoft.Compute/virtualMachines | DisasterRecovery | Medium | Replicate VMs using Azure Site Recovery | Learn |
| 459 | d37db635-157f-584d-9bce-4f6fc8c65ce5 | Microsoft.Network/virtualNetworkGateways | HighAvailability | High | Connect ExpressRoute gateway with circuits from diverse peering locations | Learn |
| 460 | d40c769d-2f08-4980-8d8f-a386946276e6 | Microsoft.Network/expressRouteCircuits | Scalability | Medium | Implement rate-limiting across ExpressRoute Direct Circuits to optimize network flow | Learn |
| 461 | dac421ec-2832-4c37-839e-b6dc5a38f2fa | Microsoft.Insights/components | ServiceUpgradeAndRetirement | Medium | Convert Classic Deployments | Learn |
| 462 | dcaf8128-94bd-4d53-9235-3a0371df6b74 | Microsoft.ContainerService/managedClusters | MonitoringAndAlerting | High | Enable AKS Monitoring | Learn |
| 463 | df0ff862-814d-45a3-95e4-4fad5a244ba6 | Microsoft.Compute/virtualMachines | Scalability | High | Mission Critical Workloads should consider using Premium or Ultra Disks | Learn |
| 464 | dfedbeb1-1519-fc47-86a5-52f96cf07105 | Microsoft.Compute/virtualMachines | Scalability | Medium | Enable Accelerated Networking (AccelNet) | Learn |
| 465 | e35cf148-8eee-49d1-a1c9-956160f99e0b | Microsoft.ApiManagement/service | HighAvailability | High | Azure API Management platform version should be stv2 | Learn |
| 466 | e544520b-8505-7841-9e77-1f1974ee86ec | Microsoft.DocumentDB/databaseAccounts | DisasterRecovery | High | Configure continuous backup mode | Learn |
| 467 | e6c7e1cc-2f47-264d-aa50-1da421314472 | Microsoft.Storage/storageAccounts | HighAvailability | High | Ensure that storage accounts are zone or region redundant | Learn |
| 468 | e7495e1c-0c75-0946-b266-b429b5c7f3bf | Microsoft.Compute/virtualMachineScaleSets | Scalability | Medium | Deploy VMSS with Flex orchestration mode instead of Uniform | Learn |
| 469 | e7dbd21f-b27a-4b8c-a901-cedb1e6d8e1e | Microsoft.Devices/IotHubs | MonitoringAndAlerting | Low | Disabled Fallback Route | Learn |
| 470 | e7f0fd54-fba0-054e-9ab8-e676f2851f88 | Microsoft.ContainerRegistry/registries | DisasterRecovery | Low | Enable soft delete policy | Learn |
| 471 | eb005943-40a8-194b-9db2-474d430046b7 | Microsoft.ContainerRegistry/registries | HighAvailability | High | Use Premium tier for critical production workloads | Learn |
| 472 | ee66ff65-9aa3-2345-93c1-25827cf79f44 | Microsoft.Compute/virtualMachineScaleSets | Scalability | High | Configure VMSS Autoscale to custom and configure the scaling metrics | Learn |
| 473 | eeba3a49-fef0-481f-a471-7ff01139b474 | Microsoft.Devices/IotHubs | HighAvailability | High | Do not use free tier | Learn |
| 474 | f05a3e6d-49db-2740-88e2-2b13706c1f67 | Microsoft.Network/trafficManagerProfiles | HighAvailability | High | Traffic Manager Monitor Status Should be Online | Learn |
| 475 | f075a1bd-de9e-4819-9a1d-1ac41037a74f | Microsoft.ServiceBus/namespaces | ServiceUpgradeAndRetirement | High | Configure the minimum TLS version for Service Bus namespaces to TLS v1.2 or higher | Learn |
| 476 | f4201965-a88d-449d-b3b4-021394719eb2 | Microsoft.App/managedenvironments | HighAvailability | High | Deploy zone redundant Container app environments | Learn |
| 477 | f6a14b32-a727-4ace-b5fa-7b1c6bdff402 | Microsoft.Network/connections | Scalability | Medium | For better data path performance enable FastPath on ExpressRoute Connections | Learn |
| 478 | f8c2e6d9-4b3a-45d6-b9e2-8e7f3a1c2d04 | Microsoft.Network/virtualNetworkGateways | HighAvailability | Medium | Configure customer-controlled VPN gateway maintenance | Learn |
| 479 | fa0cf4f5-0b21-47b7-89a9-ee936f193ce1 | Microsoft.Compute/disks | HighAvailability | Medium | Use Azure Disks with Zone Redundant Storage for higher resiliency and availability | Learn |
| 480 | fbfef3df-04a5-41b2-a8fd-b8541eb04956 | Microsoft.EventHub/namespaces | Scalability | High | Enable auto-inflate on Event Hub Standard tier | Learn |
| 481 | fd049c28-ae6d-48f0-a641-cc3ba1a3fe1d | Microsoft.Web/sites | OtherBestPractices | High | Enable Health check for App Services | Learn |
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.