Azure Cognitive Search Without SLA Index Updates misconfiguration detected in code

Azure Cognitive Search Without SLA Index Updates misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_208
Category - Subcategory	Public Exposure - Resource Health
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

Azure Cognitive Search provides fully managed cloud search service capabilities, such as indexing and querying. Indexing involves loading content into the service to make it searchable, whereas querying is the process of searching for that content. The performance and resilience of these processes are enhanced by configuring multiple replicas. Replicas enable queries and index updates to be load balanced across different replicas, ensuring efficient performance and high availability.

To ensure consistent performance and high availability for search index updates, it's important to have an adequate number of replicas. According to Azure's Service Level Agreement (SLA), a minimum of 3 replicas is required to guarantee the SLA for search index updates.

This rule checks and ensures that the Azure Cognitive Search service has at least 3 replicas configured, guaranteeing that the SLA for search index updates is maintained.

How to Fix

Resource:

• azurerm_search_service

Arguments:

• replica_count [source,go]

---

resource "azurerm_search_service" "example" { name = "example-search-service"

... other configurations ...

• replica_count = 3

... other configurations ...

}