Azure Cognitive Search With Global IP Allowance misconfiguration detected in code

Azure Cognitive Search With Global IP Allowance misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_210
Category - Subcategory	Public Exposure - APIs
Provider	AZURE
Severity	MEDIUM
Framework	Terraform, Terraform Plan

Impact

Ensure Azure Cognitive Search service allowed IPS does not give public Access

How to Fix

Resource:

• azurerm_search_service

Arguments:

• allowed_ips [source,go]

---

resource "azurerm_search_service" "example" { name = "example-search-service"

... other configurations ...

• allowed_ips = [
• "192.168.1.0/24", # A specific trusted CIDR range.
• ... other allowed IPs ...

• ]

... other configurations ...

}