Recommendations
| Category | Theme | Impact | Impacted resource | Problem | Suggested action | Last updated | Est. current run-rate |
|---|---|---|---|---|---|---|---|
| Cost | Storage optimization | Low | stbhappdata01 | Storage account "stbhappdata01" uses GZRS replication, which costs more than locally redundant storage. | Review whether geo-redundancy is required for this data, or switch to LRS/ZRS to reduce cost. | 2026-10-24 | — |
| HighAvailability | Reliability | High | vm-bh-app-01 | Business-critical virtual machine "vm-bh-app-01" has no modeled availability-zone placement. | Deploy the workload across availability zones or document an equivalent resilience design. | 2026-10-24 | ~$140/mo |
| OperationalExcellence | Operational excellence | Medium | vm-bh-app-01 | Business-critical virtual machine "vm-bh-app-01" has no modeled diagnostic-settings evidence. | Configure diagnostic settings and route platform logs and metrics to the approved monitoring destination. | 2026-10-24 | ~$140/mo |
| Cost | Right-sizing / shutdown | Medium | vm-bh-app-01 | Virtual machine "vm-bh-app-01" has averaged 10.26% CPU, below a typical utilization threshold. | Right-size to a smaller SKU or shut this virtual machine down during idle periods to reduce cost. | 2026-10-24 | ~$140/mo |
| Performance | Performance | Medium | stbhappdata02 | Storage account "stbhappdata02" is experiencing request throttling due to exceeding its transaction limit. | Increase the account's performance tier or distribute load across multiple accounts. | 2026-09-01 | — |
| Performance | Performance | Low | vm-data-worker-03 | Virtual machine "vm-data-worker-03" supports accelerated networking but does not have it enabled. | Enable accelerated networking on this VM's network interface. | 2026-09-01 | — |
| Performance | Performance | High | vm-batch-node-04 | Virtual machine "vm-batch-node-04" has averaged 92% CPU utilization, above a typical capacity threshold. | Upgrade to a larger VM size to relieve the capacity constraint. | 2026-09-01 | — |
| Performance | Performance | Low | redis-session-cache | Redis cache "redis-session-cache" is running with a non-recommended eviction policy configuration. | Review the cache configuration and tuning settings for this workload. | 2026-09-01 | — |
| Security | Security | High | kv-app-secrets | Key Vault "kv-app-secrets" does not have soft delete and purge protection fully enabled. | Enable soft delete and purge protection to protect against accidental or malicious deletion. | 2026-09-01 | — |
| Security | Security | Medium | nsg-app-frontend | Network security group "nsg-app-frontend" has a rule allowing unrestricted inbound access. | Restrict the inbound rule to only the required source IP ranges. | 2026-09-01 | — |
Run-rate is an estimate at current on-demand retail pricing for the flagged VM's SKU/region (see the Rightsizing page) — not a guaranteed savings figure. Only shown where this recommendation's resource could be matched to ingested VM data.