An Azure relational database service.
Hi BWilson-1307,
Thanks for the detailed write-up. The fact that the same Terraform succeeds in Central US but fails in East US 2 is actually the key clue here, so let me explain what's going on.
This error isn't caused by your Terraform or Portal configuration at all. Zone Redundant Access (Availability Zones) is a per-subscription quota that Microsoft has to grant separately for each region. East US 2 supports zone redundancy as a service, but your subscription hasn't yet been approved to use it there. That's why the CLI checks came back clean (they only confirm the region/SKU supports ZR in general, not whether your subscription has the allocation) while the deployment itself is still blocked.
Now, how to fix it]:
- Go to Azure Portal > Help + support > Create a support request
- Issue type: Service and subscription limits (quotas)
- Quota type: SQL Database
- On the quota details page, select Zone Redundant Access (Availability Zones)
- Set Location = East US 2, and enter the expected vCore consumption (use the total vCores for the pool tier you're deploying, with a bit of headroom for future scaling)
- Submit
This is a no-cost quota request (doesn't require a paid support plan), and turnaround is typically 1-2 business days. Once it's approved, your existing Terraform should deploy without any changes.
A couple of side notes in case they're relevant to your setup:
- If this pool is part of a failover group with a secondary elsewhere, the same error can surface if the secondary region doesn't support zones yet. The documented workaround there is to enable/disable HA through active geo-replication when creating the secondary, then add it to the failover group afterward.
- Worth a quick check that no subscription-level Azure Policy is restricting zoneRedundant on SQL resources, though given it works fine in Central US this is unlikely to be the cause.
If this answers your question, please consider marking it as the accepted answer or upvoting it so other users hitting the same error can find it more easily. Let us know how the quota request goes, happy to help further if it's still blocked afterward.