Event Hub Namespace not using TLS 1.2 or greater misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_223
Category - Subcategory	Public Exposure - Encryption And Protocols
Provider	AZURE
Severity	HIGH
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

This rule is ensuring that the Event Hub Namespace in Azure is utilizing at least TLS 1.2. TLS 1.2 is a security protocol for encrypting the transmission of data. Using older versions of TLS or other outdated security protocols can make a system more vulnerable to attacks. As such, systems that do not use at least TLS 1.2 are considered to be at a higher security risk.

How to Fix

Resource: azurerm_eventhub_namespace

• Arguments: minimum_tls_version

To fix this issue, you should ensure that you use at least TLS 1.2 for Event Hub Namespace. Update the minimum_tls_version property in your Terraform code to "1.2". [source,go]

resource "azurerm_eventhub_namespace" "example" { name = "example-namespace" location = azurerm_resource_group.example.location resource_group_name = azurerm_resource_group.example.name sku = "Standard" capacity = "2" dedicated_cluster_id = azurerm_eventhub_cluster.example.id auto_inflate_enabled = true maximum_throughput_units = 1

• minimum_tls_version = "1.2" }

---