Traffic Manager profile should be enabled
High
Azure
General
trafficmanagerprofiles-traffic-manager-profile-ena
Applies to
Microsoft.Network/trafficmanagerprofiles
What CGPulse checks
A resource passes this rule when profileStatus must equal Enabled. Anything else is reported as a finding with the evaluated property value attached as evidence.
How to fix it
Enable the Traffic Manager profile to resume routing traffic. In Azure Portal: Traffic Manager profile > Overview > set Profile status to Enabled. See: https://learn.microsoft.com/en-us/azure/traffic-manager/traffic-manager-manage-profiles
CLI
az network traffic-manager profile update --ids "{id}" --status EnabledTerraform
resource "azurerm_traffic_manager_profile" "{name}" {
name = "{name}"
resource_group_name = "{rg}"
profile_status = "Enabled"
traffic_routing_method = "Weighted"
monitor_config {
protocol = "HTTPS"
port = 443
path = "/"
}
dns_config {
relative_name = "{name}"
ttl = 60
}
}
Compliance frameworks
Is your environment compliant with this rule?
CGPulse checks it — and 621 others — against your Azure and AWS accounts with read-only access.
Related Azure rules
- Action Group should be enabled
- Activity Log Alert should be enabled
- AKS cluster logs should be sent to Log Analytics
- AKS cluster must enable RBAC
- AKS cluster must enable RBAC
- AKS cluster should be a private cluster
- AKS cluster should disable local accounts
- AKS cluster should enable Azure RBAC for Kubernetes