Azure SQL Servers Firewall rule allow ingress access from 0.0.0.0/0 misconfiguration detected in cod

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_11
Category - Subcategory	Public Exposure - Sensitive Ports
Provider	AZURE
Severity	HIGH
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP)

How to Fix

Resource: azurerm_mariadb_firewall_rule azurerm_sql_firewall_rule azurerm_postgresql_firewall_rule azurerm_mysql_firewall_rule

• Arguments: start_ip_address [source,go]

---

resource "azurerm_mysql_firewall_rule" "example" { ...

• start_ip_address = "0.0.0.0"
• end_ip_address = "255.255.255.255" }

---