MySQL server disables infrastructure encryption misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_96
Category - Subcategory	Storage - Encryption
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

Enable infrastructure encryption for Azure Database for MySQL servers to have higher level of assurance that the data is secure. When infrastructure encryption is enabled, the data at rest is encrypted twice using FIPS 140-2 compliant Microsoft managed keys.

How to Fix

Resource: azurerm_mysql_server

• Arguments: infrastructure_encryption_enabled [source,go]

---

resource "azurerm_mysql_server" "example" { ...

• infrastructure_encryption_enabled = true }

---