Azure Key Vault Public Network Access Control misconfiguration detected in code

Azure Key Vault Public Network Access Control misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_189
Category - Subcategory	Public Exposure - Encryption And Protocols
Provider	AZURE
Severity	HIGH
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

Ensure that Azure Key Vault disables public network access

How to Fix

Resource:

• azurerm_key_vault

Arguments:

• public_network_access_enabled
• network_acls [source,go]

---

resource "azurerm_key_vault" "example" { name = "example-kv" resource_group_name = azurerm_resource_group.example.name location = azurerm_resource_group.example.location

... other configurations ...

• public_network_access_enabled = false

network_acls { #... configurations...

• ip_rules = ["<valid_ip_range>"] } }

---