Storage Account Not Forcing HTTPS
- Query id: 12944ec4-1fa0-47be-8b17-42a034f937c2
- Query name: Storage Account Not Forcing HTTPS
- Platform: Terraform
- Severity: High
- Category: Encryption
- URL: Github
Description¶
Storage Accounts should enforce the use of HTTPS
Documentation
Code samples¶
Code samples with security vulnerabilities¶
Postitive test num. 1 - tf file
resource "azurerm_storage_account" "positive1" {
name = "example1"
resource_group_name = data.azurerm_resource_group.example.name
location = data.azurerm_resource_group.example.location
account_tier = "Standard"
account_replication_type = "GRS"
enable_https_traffic_only = false
}
resource "azurerm_storage_account" "positive2" {
name = "example2"
resource_group_name = data.azurerm_resource_group.example.name
location = data.azurerm_resource_group.example.location
account_tier = "Standard"
account_replication_type = "GRS"
}
Code samples without security vulnerabilities¶
Negative test num. 1 - tf file
resource "azurerm_storage_account" "negative1" {
name = "example"
resource_group_name = data.azurerm_resource_group.example.name
location = data.azurerm_resource_group.example.location
account_tier = "Standard"
account_replication_type = "GRS"
enable_https_traffic_only = true
}