Azure MySQL Database Server SSL connection is disabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_28
Category - Subcategory	Public Exposure - Encryption And Protocols
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	cf375c15-dee3-46a7-8b2e-def63bf0a473

Impact

SSL connectivity provides a new layer of security by connecting a database server to client applications using Secure Sockets Layer (SSL). Enforcing SSL connections between a database server and client applications helps protect against man-in-the-middle attacks. This is achieved by encrypting the data stream between the server and application. We recommend you set Enforce SSL connection to Enable on MYSQL Server databases.

How to Fix

Resource: azurerm_mysql_server

• Arguments: ssl_enforcement_enabled [source,go]

---

resource "azurerm_mysql_server" "example" { ...

• ssl_enforcement_enabled = true }

---