logo

Database

Azure No Zonal Redundancy

Description

Detects Azure Virtual Machine Scale Sets that are configured to run in only a single availability zone, making them vulnerable to zone-wide failures. This configuration reduces fault tolerance and could lead to service disruption if the single zone experiences an outage.

Weakness:

446 - Insecure service configuration - Azure

Category: Functionality Abuse

Detection Strategy

    Scans each Virtual Machine Scale Set in the Azure subscription

    Checks if the VMSS is configured with exactly one availability zone

    Reports a vulnerability if a VMSS is deployed to only a single zone instead of being distributed across multiple zones