SQL Server is enabled for public network access misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_113
Category - Subcategory	Public Exposure - Database Endpoints
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

By ensuring that your SQL server is not public, you can help protect your data from unauthorized access or tampering. Public SQL servers are accessible over the internet, which can make them vulnerable to external threats such as hackers or malware. By making it private, you can help ensure that only authorized users can access the data.

How to Fix

Resource: azurerm_mssql_server

• Arguments: public_network_access_enabled [source,go]

---

resource "azurerm_mssql_server" "example" { ...

• public_network_access_enabled = false }

---