Azure Synapse Spark Pool not using isolated compute misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_242
Category - Subcategory	Compute - Unsanctioned Resource Or Type
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

This rule detects whether isolated compute is disabled for Synapse Spark pools in Azure. Isolated compute utilizes dedicated resources that are not shared with other customers. This isolation minimizes data breach and unauthorized access risks, enhancing security for your Spark pools. Enabling isolated compute is crucial for maintaining high security standards, especially when handling sensitive data or running critical applications within Synapse Spark pools.

How to Fix

Resource: Microsoft.Synapse/workspaces/bigDataPools

• Arguments: properties/isComputeIsolationEnabled

In this example, the properties/isComputeIsolationEnabled property is set to true within the properties section of the Microsoft.Synapse/workspaces/bigDataPools resource definition. [source,go]

{ ... "resources": [ { "type": "Microsoft.Synapse/workspaces/bigDataPools", ... "properties": { ... "isComputeIsolationEnabled": true, } } ] }