Service Bus queue should enable duplicate detection

Medium Azure General queues-service-bus-queue-enable-2

Applies to

Microsoft.ServiceBus/namespaces/queues

What CGPulse checks

A resource passes this rule when requiresDuplicateDetection must equal true. Anything else is reported as a finding with the evaluated property value attached as evidence.

How to fix it

Enable duplicate detection to prevent processing the same message multiple times. In Azure Portal: Service Bus > Queues > create queue with Duplicate detection enabled. See: https://learn.microsoft.com/en-us/azure/service-bus-messaging/duplicate-detection

CLI

az servicebus queue create -g "{rg}" --namespace-name "<namespace-name>" -n "<queue-name>" --enable-duplicate-detection true --duplicate-detection-history-time-window P1D

Bicep

resource queue 'Microsoft.ServiceBus/namespaces/queues@2024-01-01' = {
  name: '<queue-name>'
  parent: serviceBusNamespace
  properties: {
    requiresDuplicateDetection: true
    duplicateDetectionHistoryTimeWindow: 'P1D'
  }
}

Terraform

resource "azurerm_servicebus_queue" "{name}" {
  name                         = "<queue-name>"
  namespace_id                 = azurerm_servicebus_namespace.{name}.id
  requires_duplicate_detection = true
  duplicate_detection_history_time_window = "P1D"
}

Compliance frameworks

Cloud Security: Azure Foundations

Is your environment compliant with this rule?

CGPulse checks it — and 621 others — against your Azure and AWS accounts with read-only access.

Run a free scan