Azure CDN Using Outdated TLS Encryption misconfiguration detected in code

Azure CDN Using Outdated TLS Encryption misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_200
Category - Subcategory	Public Exposure - Encryption And Protocols
Provider	AZURE
Severity	MEDIUM
Framework	Terraform, Terraform Plan

Impact

Ensure the Azure CDN endpoint is using the latest version of TLS encryption

How to Fix

Resource:

• azurerm_cdn_endpoint_custom_domain

Arguments:

• cdn_managed_https or user_managed_https [source,go]

---

resource "azurerm_cdn_endpoint_custom_domain" "example" { name = "example-cdn-custom-domain"

... other configurations ...

cdn_managed_https {

... other configurations ...

• tls_version = "TLS12"

... other configurations ...

}

or

user_managed_https {

... other configurations ...

• tls_version = "TLS12"

... other configurations ...

}

... other configurations ...

}