Kusto clusters should use a SKU with an SLA
This control checks if Kusto clusters use SKU with an SLA. It is non-compliant if Kusto clusters use SKUs without an SLA. The SKUs flagged are `Dev(No SLA)_Standard_D11_v2` and `Dev(No SLA)_Standard_E2a_v4`.
What this control checks
Kusto clusters must not use Dev(No SLA)_Standard_D11_v2 or Dev(No SLA)_Standard_E2a_v4 SKUs.
Common pitfalls
Check inspects only the first sku block name
The check reads sku/[0]/name on azurerm_kusto_cluster. It sets missing_attribute_result=CheckResult.UNKNOWN, so a missing attribute is reported as unknown.
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.kusto_cluster_sku_with_sla.
Scans of the Terraform code that flag the same setting before deployment: Checkov check CKV_AZURE_180.
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
kusto_cluster_sku_with_sla - Checkov Check:
CKV_AZURE_180 - Powerpipe Control:
azure_compliance.control.kusto_cluster_sku_with_sla
Last reviewed: 2026-10-13