Azure Service Bus Doesn't Use Double Encryption misconfiguration detected in code

Azure Service Bus Doesn't Use Double Encryption misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_199
Category - Subcategory	Storage - Encryption
Provider	AZURE
Severity	MEDIUM
Framework	Terraform, Terraform Plan

Impact

Azure Service Bus is a fully managed enterprise message broker with message queues and publish-subscribe topics. It offers secure and reliable communication between disparate applications. Ensuring that the Service Bus uses double encryption ensures that your data is encrypted at rest and in transit, providing an additional layer of protection against unauthorized access.

This rule checks that Azure Service Bus namespaces have double encryption enabled.

How to Fix

Resource:

• azurerm_servicebus_namespace

Arguments:

• customer_managed_key/[0]/infrastructure_encryption_enabled [source,go]

---

resource "azurerm_servicebus_namespace" "example" { name = "example-servicebus-namespace"

... other configurations ...

customer_managed_key {

• infrastructure_encryption_enabled = true

... other configurations ...

}

... other configurations ...

}