PostgreSQL server does not enable infrastructure encryption misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_130
Category - Subcategory	Storage - Encryption
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

Enable infrastructure encryption for Azure Database for PostgreSQL servers to have higher level of assurance that the data is secure. When infrastructure encryption is enabled, the data at rest is encrypted twice using FIPS 140-2 compliant Microsoft managed keys.

How to Fix

Resource: azurerm_postgresql_server

• Arguments: infrastructure_encryption_enabled [source,go]

---

resource "azurerm_postgresql_server" "example" { ...

• infrastructure_encryption_enabled = true }

---