Public IP should be associated with a resource
Low
Azure
General
publicip-public-associated-resource
Applies to
Microsoft.Network/publicIPAddresses
What CGPulse checks
A resource passes this rule when isAssociated must equal true. Anything else is reported as a finding with the evaluated property value attached as evidence.
How to fix it
Verify the orphaned resource is unused, then delete or reattach it to reduce costs and risk. In Azure Portal: Resource > Overview > verify usage status. See: https://learn.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations
Careful: Permanently deletes the public IP address. Verify it is truly unused before proceeding
CLI
az network public-ip delete --ids "{id}"Terraform
# Orphaned Public IP — verify it is unused, then remove from Terraform state # or delete the resource. Unassociated Public IPs incur cost and risk. # To delete: remove the azurerm_public_ip resource from your configuration # terraform state rm azurerm_public_ip.example
Compliance frameworks
Is your environment compliant with this rule?
CGPulse checks it — and 621 others — against your Azure and AWS accounts with read-only access.
Related Azure rules
- Action Group should be enabled
- Activity Log Alert should be enabled
- AKS cluster logs should be sent to Log Analytics
- AKS cluster must enable RBAC
- AKS cluster must enable RBAC
- AKS cluster should be a private cluster
- AKS cluster should disable local accounts
- AKS cluster should enable Azure RBAC for Kubernetes