Azure cognitive search does not disable public network access misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_124
Category - Subcategory	Public Exposure - Database Endpoints
Provider	AZURE
Severity	LOW
Framework	Terraform, Terraform Plan

Impact

It is generally a good security practice to ensure that your Azure Cognitive Search instance does not have public network access enabled, as this means that it is only accessible from within your private network. This can help to protect your search instance from unauthorized access, as external parties will not be able to connect to it over the internet. It is especially important to ensure that public network access is disabled if your Azure Cognitive Search instance contains sensitive or confidential data.

How to Fix

Resource: azurerm_search_service

• Arguments: public_network_access_enabled [source,go]

---

resource "azurerm_search_service" "example" { ...

• public_network_access_enabled = false }

---