Azure Automation account variables are not encrypted misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_73
Category - Subcategory	Storage - Encryption
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	9f439679-edfa-482f-8627-bf1d00ebbe7e

Impact

If you have Automation Account Variables storing sensitive data that are not already encrypted, then you will need to delete them and recreate them as encrypted variables.

How to Fix

Resource: azurerm_automation_variable_int

• Arguments: encrypted [source,go]

---

resource "azurerm_automation_variable_int" "example" { ...

• encrypted = true }

---