API Management with Public Access misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_174
Category - Subcategory	Public Exposure - APIs
Provider	AZURE
Severity	MEDIUM
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

Ensure API management public access is disabled

How to Fix

Resource: azurerm_api_management

• Arguments: public_network_access_enabled [source,go]

---

resource "azurerm_api_management" "example" { name = "example-api" location = azurerm_resource_group.example.location resource_group_name = azurerm_resource_group.example.name publisher_name = "My Company" publisher_email = "[e-mail]"

• public_network_access_enabled = false

tags = { Environment = "production" } }