Storage Account Not Using Latest TLS Encryption Version

Query id: 8263f146-5e03-43e0-9cfe-db960d56d1e7
Query name: Storage Account Not Using Latest TLS Encryption Version
Platform: Terraform
Severity: Medium
Category: Encryption
CWE: 326
URL: Github

Description¶

Ensure Storage Account is using the latest version of TLS encryption
Documentation

Code samples¶

Code samples with security vulnerabilities¶

Positive test num. 1 - tf file

resource "azurerm_storage_account" "positive2" {
  name                     = "storageaccountname"
  resource_group_name      = azurerm_resource_group.example.name
  location                 = azurerm_resource_group.example.location
  account_tier             = "Standard"
  account_replication_type = "GRS"
  min_tls_version = "TLS1_1"

  tags = {
    environment = "staging"
  }
}

Code samples without security vulnerabilities¶

Negative test num. 1 - tf file

resource "azurerm_storage_account" "negative1" {
  name                     = "storageaccountname"
  resource_group_name      = azurerm_resource_group.example.name
  location                 = azurerm_resource_group.example.location
  account_tier             = "Standard"
  account_replication_type = "GRS"
  min_tls_version = "TLS1_2"

  tags = {
    environment = "staging"
  }
}