PostgreSQL server does not disable public network access misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_68
Category - Subcategory	Public Exposure - Database Endpoints
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

Disabling the public network access property improves security by ensuring your Azure Database for PostgreSQL single servers can only be accessed from a private endpoint. This configuration strictly disables access from any public address space outside of Azure IP range and denies all logins that match IP or virtual network-based firewall rules.

How to Fix

Resource: azurerm_postgresql_server

• Arguments: public_network_access_enabled [source,go]

---

resource "azurerm_postgresql_server" "example" { ...

• public_network_access_enabled = false ... }

---