Azure / Enterprise-Scale

The Azure Landing Zones (Enterprise-Scale) architecture provides prescriptive guidance coupled with Azure best practices, and it follows design principles across the critical design areas for organizations to define their Azure architecture
https://aka.ms/alz
MIT License
1.69k stars 963 forks source link

Feature Request: Add the word "Standard" behind the DDoS protection option in the portal accelerator #1594

Closed samsmith-MSFT closed 5 months ago

samsmith-MSFT commented 6 months ago

DDoS protection is expensive, and people might accidentally leave this enabled while deploying this on their own without fully understanding the massive cost implications that come with it. Can we please add that it is DDoS protection Standard to the name of the option in the portal accelerator. Also, in the information bubble next to it can we put a small disclaimer and maybe a link to DDoS protection standard pricing as well as default it to disabled.

This rubbed someone I know the wrong way as they believed that DDoS protection Standard should not be deployed unless there is a specific need as DDoS protection basic is already there. In other words, it should be listed as optional as well.

Springstone commented 6 months ago

Hi samsmith-MSFT, thanks for raising your concern. We can certainly provide a little more clarity around the enablement of DDoS protection plans and will look at including your suggestions. The solution we enable is now called DDoS Network Protection (the term Standard has been dropped).

Note, however, enabling DDoS protection is a best practice and we will keep it enabled by default.

We are looking at including DDoS IP Protection as an additional option (more cost effective) as well.

Springstone commented 5 months ago

Closing this issue as we've done what we can to accommodate.