Storage account not using latest TLS encryption version

Ce produit n'est pas pris en charge par le site Datadog que vous avez sélectionné. ().
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Metadata

Id: ansible-azure-storage-account-not-using-latest-tls-encryption-version

Provider: Azure

Platform: Ansible

Severity: Medium

Category: Encryption

Learn More

Description

Storage accounts must enforce TLS 1.2 to protect data in transit and prevent downgrade attacks using older, vulnerable TLS versions. For Ansible, the azure_rm_storageaccount or azure.azcollection.azure_rm_storageaccount resource must include the minimum_tls_version property set to "TLS1_2". Resources missing minimum_tls_version or configured with any value other than "TLS1_2" (for example "TLS1_0" or "TLS1_1") are flagged.

Compliant Code Examples

- name: Create an account with kind of FileStorage
  azure_rm_storageaccount:
    resource_group: myResourceGroup
    name: c1h0002
    type: Premium_LRS
    kind: FileStorage
    minimum_tls_version: TLS1_2
    tags:
      testing: testing

Non-Compliant Code Examples

---
- name: Create an account with kind of FileStorage
  azure_rm_storageaccount:
    resource_group: myResourceGroup
    name: c1h0002
    type: Premium_LRS
    kind: FileStorage
    minimum_tls_version: TLS1_0
    tags:
      testing: testing
- name: Create a second account with kind of FileStorage
  azure_rm_storageaccount:
    resource_group: myResourceGroup
    name: clh0003
    type: Premium_LRS
    kind: FileStorage