App Configuration Public Access Enabled misconfiguration detected in code

App Configuration Public Access Enabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_185
Category - Subcategory	Public Exposure - APIs
Provider	AZURE
Severity	HIGH
Framework	Terraform, Terraform Plan

Impact

Ensure 'Public Access' is not Enabled for App configuration

How to Fix

Resource:

• azurerm_app_configuration

Arguments:

• public_network_access [source,go]

---

resource "azurerm_app_configuration" "example" { name = "example-app-configuration" location = azurerm_resource_group.example.location resource_group_name = azurerm_resource_group.example.name

... other configurations ...

• public_network_access = "Disabled" // Ensure public access is disabled }

---