last sync: 2025-Apr-29 17:16:02 UTC

[Preview]: Cosmos Database Accounts should be Zone Redundant

Azure BuiltIn Policy definition

Source Azure Portal
Display name [Preview]: Cosmos Database Accounts should be Zone Redundant
Id 44c5a1f9-7ef6-4c38-880c-273e8f7a3c24
Version 1.0.0-preview
Details on versioning
Versioning Versions supported for Versioning: 1
1.0.0-preview
Built-in Versioning [Preview]
Category Resilience
Microsoft Learn
Description Cosmos Database Accounts can be configured to be Zone Redundant or not. If the 'enableMultipleWriteLocations' is set to 'true' then all locations must have a 'isZoneRedundant' property and it must be set to 'true'. If the 'enableMultipleWriteLocations' is set to 'false' then the primary location ('failoverPriority' set to 0) must have a 'isZoneRedundant' property and it must be set to 'true'. Enforcing this policy ensures Cosmos Database Accounts are appropriately configured for zone redundancy.
Cloud environments AzureCloud = true
AzureUSGovernment = true
AzureChinaCloud = unknown
Available in AzUSGov The Policy is available in AzureUSGovernment cloud. Version: '1.*.*-preview'
Mode Indexed
Type BuiltIn
Preview True
Deprecated False
Effect Default
Audit
Allowed
Audit, Deny, Disabled
RBAC role(s) none
Rule aliases IF (4)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.DocumentDB/databaseAccounts/enableMultipleWriteLocations Microsoft.DocumentDB databaseAccounts properties.enableMultipleWriteLocations True True
Microsoft.DocumentDB/databaseAccounts/Locations[*] Microsoft.DocumentDB databaseAccounts properties.Locations[*] True False
Microsoft.DocumentDB/databaseAccounts/locations[*].failoverPriority Microsoft.DocumentDB databaseAccounts properties.locations[*].failoverPriority True False
Microsoft.DocumentDB/databaseAccounts/locations[*].isZoneRedundant Microsoft.DocumentDB databaseAccounts properties.locations[*].isZoneRedundant True False
Rule resource types IF (1)
Compliance Not a Compliance control
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type polSet in AzUSGov
[Preview]: Resources should be Zone Resilient 130fb88f-0fc9-4678-bfe1-31022d71c7d5 Resilience Preview BuiltIn true
History
Date/Time (UTC ymd) (i) Change type Change detail
2023-10-31 19:02:40 add 44c5a1f9-7ef6-4c38-880c-273e8f7a3c24
JSON compare n/a
JSON
api-version=2021-06-01
EPAC