Azure Cognitive Services account configured with local authentication misconfiguration detected in c

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_236
Category - Subcategory	Public Exposure - Admin Interfaces
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	9f9c1a6b-7138-48ae-a910-00a839b614ef

Impact

This rule checks whether local authentication is disabled in Azure Cognitive Services accounts. Local authentication, when enabled, allows any authenticated user to make changes, regardless of location. This can be risky because it doesn't enforce additional security measures beyond basic authentication, and can potentially lead to unauthorized access, data breaches, and other security issues. Disabling local authentication strengthens security by requiring users to utilize more secure methods.

How to Fix

Resource: Microsoft.CognitiveServices/accounts

• Arguments: disableLocalAuth

Set the disableLocalAuth parameter to True for the cognitive services resource. [source,go]

... "resources": [ { "type": "Microsoft.CognitiveServices/accounts", "kind": "CognitiveServices", ... "properties": {

•    "disableLocalAuth": True
  }

  } ] }

---