Storage Account Not Using Latest TLS Encryption Version

Query id: c62746cf-92d5-4649-9acf-7d48d086f2ee
Query name: Storage Account Not Using Latest TLS Encryption Version
Platform: Ansible
Severity: Medium
Category: Encryption
CWE: 326
URL: Github

Description¶

Ensure Storage Account is using the latest version of TLS encryption
Documentation

Code samples¶

Code samples with security vulnerabilities¶

Positive test num. 1 - yaml file

---
- name: Create an account with kind of FileStorage
  azure_rm_storageaccount:
    resource_group: myResourceGroup
    name: c1h0002
    type: Premium_LRS
    kind: FileStorage
    minimum_tls_version: TLS1_0
    tags:
      testing: testing
- name: Create a second account with kind of FileStorage
  azure_rm_storageaccount:
    resource_group: myResourceGroup
    name: clh0003
    type: Premium_LRS
    kind: FileStorage

Code samples without security vulnerabilities¶

Negative test num. 1 - yaml file

- name: Create an account with kind of FileStorage
  azure_rm_storageaccount:
    resource_group: myResourceGroup
    name: c1h0002
    type: Premium_LRS
    kind: FileStorage
    minimum_tls_version: TLS1_2
    tags:
      testing: testing