Description

Detects Azure Virtual Machine Scale Sets that are configured to run in only a single availability zone, making them vulnerable to zone-wide failures. This configuration reduces fault tolerance and could lead to service disruption if the single zone experiences an outage.

Detection Strategy

• Scans each Virtual Machine Scale Set in the Azure subscription

• Checks if the VMSS is configured with exactly one availability zone

• Reports a vulnerability if a VMSS is deployed to only a single zone instead of being distributed across multiple zones