Azure CosmosDB does not have Local Authentication disabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_140
Category - Subcategory	IAM - Authentication Policies
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

Disabling the admin account for your Azure Container Registry (ACR) can help improve the security of your registry. The admin account has full access to all resources within the registry, and can make any changes to the registry and its contents.

How to Fix

Resource: azurerm_container_registry

• Arguments: admin_enabled [source,go]

---

resource "azurerm_cosmosdb_account" "pass" { name = "pike-sql" location = "uksouth" resource_group_name = "pike" offer_type = "Standard" kind = "GlobalDocumentDB" local_authentication_disabled = true enable_free_tier = true

consistency_policy { consistency_level = "Session" max_interval_in_seconds = 5 max_staleness_prefix = 100 }