Azure CDN Doesn't Disable HTTP Endpoint misconfiguration detected in code

Azure CDN Doesn't Disable HTTP Endpoint misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_197
Category - Subcategory	Public Exposure - APIs
Provider	AZURE
Severity	MEDIUM
Framework	Terraform, Terraform Plan

Impact

Ensure the Azure CDN disables the HTTP endpoint

How to Fix

Resource:

• azurerm_cdn_endpoint

Arguments:

• is_http_allowed [source,go]

---

resource "azurerm_cdn_endpoint" "example" { name = "example-cdn-endpoint"

... other configurations ...

• is_http_allowed = false

... other configurations ...

}