📝 Azure Cosmos DB Account has zero Total Request Units 🟢

• Contextual name: 📝 Account has zero Total Request Units 🟢
• ID: /ce/ca/azure/cosmos-db/idle-cosmosdb-account
• Located in: 📁 Azure Cosmos DB

Flags

• 🟢 Policy with categories
• 🟢 Policy with type
• 🟢 Production policy

Our Metadata

• Policy Type: COMPLIANCE_POLICY
• Policy Category:
  • COST

Logic

• 🧠 prod.logic.yaml 🟢
  • 📕 Azure Cosmos DB Account
  • 🔌 Azure Cosmos DB Account - object.extracts.yaml
  • 🧪 test-data.json

Description

Open File

Description

This policy identifies Azure Cosmos DB accounts that have recorded zero Total Request Units (RU) over the past 30 days.

A Request Unit is a performance metric that abstracts system resource consumption (CPU, IOPS, memory, etc.) required for executing database operations within Azure Cosmos DB.

Rationale

Monitoring Total Request Units is essential for detecting idle or underutilized Cosmos DB accounts. By identifying accounts with zero recent activity, you can assess their relevance and potential for deallocation, optimizing cloud resource management and cost efficiency.

You're billed on an hourly basis for the number of RUs per second provisioned.

Impact

Idle Cosmos DB accounts incur ongoing charges for provisioned throughput, contributing to unnecessary cloud spend and resource waste.

Audit

This policy flags an Azure Cosmos DB Account as INCOMPLIANT if the Total Request Units Sum for the past 30 days equals 0.

A Cosmos DB Account will be marked as INAPPLICABLE if the account type is serverless, as determined by the Capabilities field with the value EnableServerless.

Remediation

Open File

Remediation

If the Account is No Longer Needed

Delete the account using the following commands:

Azure CLI

az cosmosdb delete --name {{cosmosdb-account-name}} --resource-group {{resource-group-name}}

PowerShells

Remove-AzCosmosDBAccount -ResourceGroupName "{{resource-group-name}}" -Name "{{cosmosdb-account-name}}"

If the Account is Needed But Idle Consider Serverless Tier

To get started with using the serverless model, you must create a new serverless account. Migrating an existing account to or from the serverless model currently isn't supported.

policy.yaml

Open File

Linked Framework Sections

Section	Sub Sections	Internal Rules	Policies	Flags
💼 Cloudaware Framework → 💼 Waste Reduction			9