Kubernetes clusters should use standard SKU
Ensure that AKS use the Paid Sku for its SLA. Checkov CKV_AZURE_170 inspects `sku_tier` on `azurerm_kubernetes_cluster`. The Powerpipe control is titled "Kubernetes clusters should use standard SKU".
AKS clusters should have Uptime SLA enabled to ensure availability of control plane components for production workloads.
What this control checks
azurerm_kubernetes_cluster must set sku_tier to Standard.
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.kubernetes_cluster_sku_standard.
Scans of the Terraform code that flag the same setting before deployment: Checkov check CKV_AZURE_170.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
kubernetes_cluster_sku_standard - Checkov Check:
CKV_AZURE_170 - Powerpipe Control:
azure_compliance.control.kubernetes_cluster_sku_standard
Last reviewed: 2026-10-13