Relay namespace should use Standard SKU
Medium
Azure
General
namespaces-relay-namespace-standard-sku
Applies to
Microsoft.Relay/namespaces
What CGPulse checks
A resource passes this rule when skuName must equal Standard. Anything else is reported as a finding with the evaluated property value attached as evidence.
How to fix it
Upgrade to Standard SKU for enhanced security features and zone redundancy. In Azure Portal: Namespace > Pricing tier > upgrade to Standard. See: https://learn.microsoft.com/en-us/azure/service-bus-messaging/service-bus-premium-messaging
CLI
az relay namespace update --ids "{id}" --sku StandardBicep
resource relayNamespace 'Microsoft.Relay/namespaces@2024-01-01' = {
name: '{name}'
location: location
sku: { name: 'Standard', tier: 'Standard' }
}Terraform
resource "azurerm_relay_namespace" "{name}" {
name = "{name}"
resource_group_name = "{rg}"
location = var.location
sku_name = "Standard"
}
Compliance frameworks
Is your environment compliant with this rule?
CGPulse checks it — and 621 others — against your Azure and AWS accounts with read-only access.
Related Azure rules
- Action Group should be enabled
- Activity Log Alert should be enabled
- AKS cluster logs should be sent to Log Analytics
- AKS cluster must enable RBAC
- AKS cluster must enable RBAC
- AKS cluster should be a private cluster
- AKS cluster should disable local accounts
- AKS cluster should enable Azure RBAC for Kubernetes