Azure PostgreSQL database server with SSL connection disabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_29
Category - Subcategory	Public Exposure - Encryption And Protocols
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	ccfaf3f9-0bbf-4235-82ac-8910058ee060

Impact

SSL connectivity provides a new layer of security by connecting a database server to client applications using a Secure Sockets Layer (SSL). Enforcing SSL connections between a database server and client applications helps protect against man-in-the-middle attacks. This is achieved by encrypting the data stream between the server and application. We recommend you set Enforce SSL connection to** Enable** on PostgreSQL Server databases.

How to Fix

Resource: azurerm_postgresql_server

• Arguments: ssl_enforcement_enabled [source,go]

---

resource "azurerm_postgresql_server" "example" { ...

• ssl_enforcement_enabled = true }

---