Web PubSub Without SLA SKU misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_175
Category - Subcategory	Public Exposure - Ingress Controls
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

Azure Web PubSub is a real-time web messaging service that allows you to build real-time applications using WebSockets and other WebSub-compatible protocols. The service's tier or SKU determines its pricing, features, and SLA. The "Free_F1" SKU does not come with an SLA. To ensure service availability and support, it's recommended to use a SKU that provides an SLA.

This rule ensures that the Azure Web PubSub service is not using the "Free_F1" SKU, which lacks an SLA.

How to Fix

Resource: azurerm_web_pubsub

• Arguments: sku [source,go]

---

resource "azurerm_web_pubsub" "example" { name = "example-webpubsub" location = azurerm_resource_group.example.location resource_group_name = azurerm_resource_group.example.name

• sku = "Standard_S1" # or any other SKU with SLA

tags = { Environment = "production" } }