MariaDB servers do not have public network access enabled set to False misconfiguration detected in

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_48
Category - Subcategory	Public Exposure - Database Endpoints
Provider	AZURE
Severity	HIGH
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

It is generally a good security practice to ensure that your MariaDB servers do not have public network access enabled, as this means that they are only accessible from within your private network. This can help to protect your database servers from unauthorized access, as external parties will not be able to connect to them over the internet. It is especially important to ensure that public network access is disabled if your MariaDB servers contain sensitive or confidential data.

How to Fix

Resource: azurerm_mariadb_server

• Arguments: public_network_access_enabled is set to False. [source,go]

---

resource "azurerm_mariadb_server" "example" { ...

• public_network_access_enabled = false

}