Azure MariaDB database server with SSL connection disabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_47
Category - Subcategory	Public Exposure - Encryption And Protocols
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	221dd55b-2020-4d55-a8d2-b51a74efaa56

Impact

Azure Database for MariaDB supports connecting your Azure Database for MariaDB server to client applications using Secure Sockets Layer (SSL). Enforcing SSL connections between your database server and your client applications helps protect against 'man in the middle' attacks by encrypting the data stream between the server and your application. This configuration enforces that SSL is always enabled for accessing your database server.

How to Fix

Resource: azurerm_mariadb_server

• Arguments: ssl_enforcement_enabled [source,go]

---

resource "azurerm_mariadb_server" "example" { ...

• ssl_enforcement_enabled = true }

---