Azure RDP Internet access is not restricted misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_9
Category - Subcategory	Public Exposure - Sensitive Ports
Provider	AZURE
Severity	HIGH
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

Ensure that RDP access is restricted from the internet

How to Fix

Resource: azurerm_network_security_rule

• Arguments: access + protocol + destination_port_range + source_address_prefix [source,go]

---

resource "azurerm_network_security_rule" "example" { ...

• access = "Allow"
• protocol = "TCP"
• destination_port_range = ["3389" / <port range including 3389>]]
• source_address_prefix = "*" / "0.0.0.0" / "/0" / "/0" / "internet" / "any" ... }

---