SQL Elastic Pool should enable zone redundancy

Medium Azure General elasticpools-sql-elastic-pool-enable

Applies to

Microsoft.Sql/servers/elasticPools

What CGPulse checks

A resource passes this rule when zoneRedundant must equal true. Anything else is reported as a finding with the evaluated property value attached as evidence.

How to fix it

Configure zone-redundant high availability to protect against zone failures. In Azure Portal: SQL Database > Compute + storage > enable Zone redundancy. See: https://learn.microsoft.com/en-us/azure/azure-sql/database/high-availability-sla

CLI

az sql elastic-pool update --ids "{id}" --zone-redundant true

Bicep

resource elasticPool 'Microsoft.Sql/servers/elasticPools@2023-08-01-preview' = {
  name: '<pool-name>'
  parent: sqlServer
  location: location
  properties: {
    zoneRedundant: true
  }
  sku: { name: 'PremiumPool', tier: 'Premium', capacity: 125 }
}

Terraform

resource "azurerm_mssql_elasticpool" "{name}" {
  name                = "<pool-name>"
  resource_group_name = "{rg}"
  location            = var.location
  server_name         = azurerm_mssql_server.{name}.name
  zone_redundant      = true
  sku {
    name     = "PremiumPool"
    tier     = "Premium"
    capacity = 125
  }
  per_database_settings {
    min_capacity = 0
    max_capacity = 125
  }
}

Compliance frameworks

Cloud Security: Azure Foundations

Is your environment compliant with this rule?

CGPulse checks it — and 621 others — against your Azure and AWS accounts with read-only access.

Run a free scan