Azure HTTP (port 80) access from the internet is not restricted misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_160
Category - Subcategory	Public Exposure - Sensitive Ports
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

Restricting access to Azure HTTP (port 80) from the internet can help improve the security of your resources. Port 80 is used for HTTP traffic, and allowing access to it from the internet can expose your resources to potential security threats, such as malware, data breaches, and unauthorized access.

How to Fix

Resource: azurerm_network_security_rule

• Arguments: destination_port_range [source,go]

---

resource "azurerm_network_security_rule" "https" { name = "example" access = "Allow" direction = "Inbound" network_security_group_name = "azurerm_network_security_group.example.name" priority = 100 protocol = "Tcp" resource_group_name = "azurerm_resource_group.example.name"

destination_port_range = 443 source_address_prefix = "Internet" }