Azure Instance Using Basic Authentication
- Query id: e2d834b7-8b25-4935-af53-4a60668dcbe0
- Query name: Azure Instance Using Basic Authentication
- Platform: Ansible
- Severity: Medium
- Category: Best Practices
- CWE: 284
- URL: Github
Description¶
Azure Instances should use SSH Key instead of basic authentication
Documentation
Code samples¶
Code samples with security vulnerabilities¶
Positive test num. 1 - yaml file
---
- name: Create a VM with a custom image
azure_rm_virtualmachine:
resource_group: myResourceGroup
name: testvm001
vm_size: Standard_DS1_v2
admin_username: adminUser
admin_password: password01
image: customimage001
os_type: Linux
Code samples without security vulnerabilities¶
Negative test num. 1 - yaml file
---
- name: Create a VM with a custom image
azure_rm_virtualmachine:
resource_group: myResourceGroup
name: testvm001
vm_size: Standard_DS1_v2
ssh_password_enabled: false
ssh_public_keys:
- path: ~/.ssh/id_rsa.pub
key_data: somegeneratedkeydata
image: customimage001
os_type: Linux