App Service Environment is not zone redundant misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_231
Category - Subcategory	Storage - Redundancy
Provider	AZURE
Severity	MEDIUM
Framework	Terraform, Terraform Plan

Impact

This rule is designed to verify if the App Service Environment is zone redundant. Zone redundancy refers to the distribution of resources across different geographical zones to ensure business continuity and disaster recovery. A lack of zone redundancy could lead to service disruptions if the zone hosting the App Service Environment faces any unexpected issues such as outages or natural disasters. Therefore, it's crucial to establish zone redundancy to prevent service availability issues and potential data loss.

How to Fix

Resource: azurerm_app_service_environment_v3

• Arguments: zone_redundant

To fix this issue, you need to enable zone redundancy for the App Service Environment by setting the zone_redundant attribute to true. [source,go]

resource "azurerm_app_service_environment_v3" "example" { name = "example-ase" // ... zone_redundant = true }