Network public IPs should use standard SKUs as a minimum
Network public IPs should use standard SKUs as a minimum. The use of Basic or Free SKUs in Azure is cost effective but has limitations. Basic/Free SKUs should never be used for production workloads.
Typically, these SKU's do not have a service SLA and Microsoft will usually refuse to provide support for them. Consequently Basic/Free SKUs should never be used for production workloads.
What this control checks
Network public IPs should use standard SKUs as a minimum.
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.network_public_ip_no_basic_sku.
Framework-specific interpretation
CIS Azure Benchmark v2.0.0: Mapped to 5.5 (Ensure that SKU Basic/Consumption is not used on artifacts that need to be monitored (Particularly for Production...).
CIS Azure Benchmark v2.1.0: Mapped to 5.5 (Ensure that SKU Basic/Consumption is not used on artifacts that need to be monitored (Particularly for Production...).
CIS Azure Benchmark v3.0.0: Mapped to 6.5 (Ensure that SKU Basic/Consumption is not used on artifacts that need to be monitored (Particularly for Production...).
Framework mappings
The clauses this control is mapped to in each framework.
- 5.5 Ensure that SKU Basic/Consumption is not used on artifacts that need to be monitored (Particularly for Production Workloads)
- 5.5 Ensure that SKU Basic/Consumption is not used on artifacts that need to be monitored (Particularly for Production Workloads)
- 6.5 Ensure that SKU Basic/Consumption is not used on artifacts that need to be monitored (Particularly for Production Workloads)
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
network_public_ip_no_basic_sku - Powerpipe Control:
azure_compliance.control.network_public_ip_no_basic_sku
Last reviewed: 2026-10-13