Cosmos DB Account Without Tags

Query id: 23a4dc83-4959-4d99-8056-8e051a82bc1e
Query name: Cosmos DB Account Without Tags
Platform: Ansible
Severity: Medium
Category: Build Process
URL: Github

Description¶

Cosmos DB Account must have a mapping of tags.
Documentation

Code samples¶

Code samples with security vulnerabilities¶

Positive test num. 1 - yaml file

---
- name: Create Cosmos DB Account - min
  azure_rm_cosmosdbaccount:
    resource_group: myResourceGroup
    name: myDatabaseAccount
    location: westus
    geo_rep_locations:
      - name: southcentralus
        failover_priority: 0
    database_account_offer_type: Standard

Code samples without security vulnerabilities¶

Negative test num. 1 - yaml file

- name: Create Cosmos DB Account - min
  azure_rm_cosmosdbaccount:
    resource_group: myResourceGroup
    name: myDatabaseAccount
    location: westus
    geo_rep_locations:
    - name: southcentralus
      failover_priority: 0
    database_account_offer_type: Standard
    tags:
      t1: t1
      t2: t2