Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Azure Event Hub Namespace - Ensure the Azure Event Hub Namespace is zone redundant #5536

Closed
tdefise opened this issue Sep 7, 2023 · 0 comments · Fixed by #5538
Closed

Azure Event Hub Namespace - Ensure the Azure Event Hub Namespace is zone redundant #5536

tdefise opened this issue Sep 7, 2023 · 0 comments · Fixed by #5538
Labels
checks Check additions or changes

Comments

@tdefise
Copy link
Contributor

tdefise commented Sep 7, 2023

Describe the issue
It seems that there are no Checkov checks related to the best practice of making the Azure Event Hub "Zone-redundant" azurerm_eventhub_namespace

Examples

resource "azurerm_eventhub_namespace" "example" {
  name                = "example-namespace"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
  sku                 = "Standard"
  capacity            = 2
  zone_redundant      = True

  tags = {
    environment = "Production"
  }
}

Version (please complete the following information):

  • N/A

Additional context

This is a best practice as the all-active Azure Event Hubs cluster model with availability zone support provides resiliency against grave hardware failures and even catastrophic loss of entire datacenter facilities.

If an Event Hubs namespace is created in a region with availability zones, the outage risk is further spread across three physically separated facilities, and the service has enough capacity reserves to instantly cope up with the complete, catastrophic loss of the entire facility.

When a client application sends events to an Event Hubs without specifying a partition, events are automatically distributed among partitions in the event hub. If a partition isn't available for some reason, events are distributed among the remaining partitions. This behavior allows for the greatest amount of up time.

Note that for existing Azure Event Hub Namespace, this will re-create the resource

@tdefise tdefise added the checks Check additions or changes label Sep 7, 2023
@tdefise tdefise changed the title Azure Event Hub Namespace - the Azure Event Hub Namespace is zone redundant Azure Event Hub Namespace - Ensure the Azure Event Hub Namespace is zone redundant Sep 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
checks Check additions or changes
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant