GCP SQL Instances do not have SSL configured for incoming connections misconfiguration detected in c

GCP SQL Instances do not have SSL configured for incoming connections misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_GCP_6
Category - Subcategory	Public Exposure - Encryption And Protocols
Provider	GCP
Severity	HIGH
Framework	Terraform, Terraform Plan

Impact

Cloud SQL is a fully managed relational database service for MySQL, PostgreSQL and SQL Server. It offers data encryption at rest and in transit, Private connectivity with VPC and user-controlled network access with firewall protection. Cloud SQL creates a server certificate automatically when a new instance is created. We recommend you enforce all connections to use SSL/TLS.

How to Fix

[source,go]

resource "google_sql_database_instance" "main" { name = "main-instance" database_version = "POSTGRES_14" region = "us-central1"

settings {

Second-generation instance tiers are based on the machine

type. See argument reference below.

tier = "db-f1-micro" ip_configuration { ssl_mode = "TRUSTED_CLIENT_CERTIFICATE_REQUIRED" } } }