Well-Architected Cloud Review
Azure 23 automated checks
Best practices covering reliability, security, cost optimization, operational excellence, and performance efficiency
Cost Optimization
Operational Excellence
Performance Efficiency
Reliability
Security
- Storage account must enforce HTTPS transfer
- Storage account must use TLS 1.2 minimum
- Storage account must disable anonymous blob public access
- Key Vault should use RBAC authorization
- SQL Server should disable public network access
- SQL Server must use TLS 1.2 minimum
- App Service must enforce HTTPS only
- App Service must use TLS 1.2 or higher
- App Service must require FTPS or disable FTP
- Container Registry should restrict public network access
- Container Registry must disable admin user
- AKS cluster must enable RBAC
- AKS cluster should be a private cluster
- Redis Cache must disable non-SSL port
- Redis Cache must use TLS 1.2 minimum
- IAM password policy must require minimum length of 14
Measure your Well-Architected Cloud Review posture
CGPulse maps live Azure and AWS findings to these controls and tracks drift over time.