Cosmos DB accounts do not have restricted access misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_99
Category - Subcategory	Public Exposure - Database Endpoints
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

Cosmos DB is a globally distributed database service that provides multiple ways to secure and protect your data, such as network isolation, virtual networks, Azure Private Link, and Azure AD authentication. By restricting access to your Cosmos DB account, you can control who can access your database and what actions they can perform on it. By ensuring that your Cosmos DB accounts have restricted access, you can help to improve the security of your database and protect it from unauthorized access or attacks. This can help to ensure that your database is secure and available for your users.

How to Fix

Resource: azurerm_cosmosdb_account

• Arguments: public_network_access_enabled [source,go]

---

resource "azurerm_cosmosdb_account" "db" { ...

• public_network_access_enabled = false ... }

---