Create main.tf - #10
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| resource "azurerm_storage_account" "terraformaccount1" { | ||
| name = "devopssecurity1" | ||
| resource_group_name = data.azurerm_resource_group.terraformstorage.name | ||
| location = "Central US" | ||
| account_tier = "Standard" | ||
| account_replication_type = "GRS" | ||
|
|
||
| enable_https_traffic_only = false | ||
| public_network_access_enabled = true | ||
|
|
||
| } |
Check notice
Code scanning / checkov
Ensure that Storage accounts disallow public access
| resource "azurerm_storage_account" "terraformaccount1" { | ||
| name = "devopssecurity1" | ||
| resource_group_name = data.azurerm_resource_group.terraformstorage.name | ||
| location = "Central US" | ||
| account_tier = "Standard" | ||
| account_replication_type = "GRS" | ||
|
|
||
| enable_https_traffic_only = false | ||
| public_network_access_enabled = true | ||
|
|
||
| } |
Check failure
Code scanning / checkov
Ensure Storage logging is enabled for Queue service for read, write and delete requests
| resource "azurerm_storage_account" "terraformaccount1" { | ||
| name = "devopssecurity1" | ||
| resource_group_name = data.azurerm_resource_group.terraformstorage.name | ||
| location = "Central US" | ||
| account_tier = "Standard" | ||
| account_replication_type = "GRS" | ||
|
|
||
| enable_https_traffic_only = false | ||
| public_network_access_enabled = true | ||
|
|
||
| } |
Check failure
Code scanning / checkov
Ensure Storage Account is using the latest version of TLS encryption
| resource "azurerm_storage_account" "terraformaccount1" { | ||
| name = "devopssecurity1" | ||
| resource_group_name = data.azurerm_resource_group.terraformstorage.name | ||
| location = "Central US" | ||
| account_tier = "Standard" | ||
| account_replication_type = "GRS" | ||
|
|
||
| enable_https_traffic_only = false | ||
| public_network_access_enabled = true | ||
|
|
||
| } |
Check failure
Code scanning / checkov
Ensure that 'enable_https_traffic_only' is enabled
| resource "azurerm_storage_account" "terraformaccount1" { | ||
| name = "devopssecurity1" | ||
| resource_group_name = data.azurerm_resource_group.terraformstorage.name | ||
| location = "Central US" | ||
| account_tier = "Standard" | ||
| account_replication_type = "GRS" | ||
|
|
||
| enable_https_traffic_only = false | ||
| public_network_access_enabled = true | ||
|
|
||
| } |
Check failure
Code scanning / checkov
Ensure that Storage blobs restrict public access
| resource "azurerm_storage_account" "terraformaccount1" { | ||
| name = "devopssecurity1" | ||
| resource_group_name = data.azurerm_resource_group.terraformstorage.name | ||
| location = "Central US" | ||
| account_tier = "Standard" | ||
| account_replication_type = "GRS" | ||
|
|
||
| enable_https_traffic_only = false | ||
| public_network_access_enabled = true | ||
|
|
||
| } |
Check failure
Code scanning / checkov
Ensure storage account is configured without blob anonymous access
| resource "azurerm_storage_account" "terraformaccount1" { | ||
| name = "devopssecurity1" | ||
| resource_group_name = data.azurerm_resource_group.terraformstorage.name | ||
| location = "Central US" | ||
| account_tier = "Standard" | ||
| account_replication_type = "GRS" | ||
|
|
||
| enable_https_traffic_only = false | ||
| public_network_access_enabled = true | ||
|
|
||
| } |
Check failure
Code scanning / checkov
Ensure storage account is configured with private endpoint
| resource "azurerm_storage_account" "terraformaccount1" { | ||
| name = "devopssecurity1" | ||
| resource_group_name = data.azurerm_resource_group.terraformstorage.name | ||
| location = "Central US" | ||
| account_tier = "Standard" | ||
| account_replication_type = "GRS" | ||
|
|
||
| enable_https_traffic_only = false | ||
| public_network_access_enabled = true | ||
|
|
||
| } |
Check failure
Code scanning / checkov
Ensure storage account is configured with SAS expiration policy
| resource "azurerm_storage_account" "terraformaccount1" { | ||
| name = "devopssecurity1" | ||
| resource_group_name = data.azurerm_resource_group.terraformstorage.name | ||
| location = "Central US" | ||
| account_tier = "Standard" | ||
| account_replication_type = "GRS" | ||
|
|
||
| enable_https_traffic_only = false | ||
| public_network_access_enabled = true | ||
|
|
||
| } |
Check failure
Code scanning / checkov
Ensure soft-delete is enabled on Azure storage account
| resource "azurerm_storage_account" "terraformaccount1" { | ||
| name = "devopssecurity1" | ||
| resource_group_name = data.azurerm_resource_group.terraformstorage.name | ||
| location = "Central US" | ||
| account_tier = "Standard" | ||
| account_replication_type = "GRS" | ||
|
|
||
| enable_https_traffic_only = false | ||
| public_network_access_enabled = true | ||
|
|
||
| } |
Check failure
Code scanning / checkov
Ensure storage for critical data are encrypted with Customer Managed Key
2 participants
No description provided.