MySQL servers must enforce SSL/TLS connections to protect data in transit and prevent interception or man-in-the-middle attacks. For Ansible tasks using the azure.azcollection.azure_rm_mysqlserver or azure_rm_mysqlserver modules, the enforce_ssl property must be defined and set to true so the server requires TLS for client connections.
Resources missing this property or with enforce_ssl: false (the default) are flagged. Use Ansible boolean values such as true or yes to enable this setting. The rule treats Ansible truthy values as valid.
- name:Create Azure MySQL server with SSL enforcedazure.azcollection.azure_rm_mysqlserver:name:my-mysql-serverresource_group:my-rglocation:eastussku:B_Gen5_1version:"5.7"administrator_login:adminuseradministrator_login_password:"{{ mysql_password }}"enforce_ssl:true
Compliant Code Examples
- name:Create (or update) MySQL Serverazure.azcollection.azure_rm_mysqlserver:resource_group:myResourceGroupname:testserversku:name:B_Gen5_1tier:Basiclocation:eastusstorage_mb:1024enforce_ssl:trueversion:5.6admin_username:cloudsaadmin_password:password
Non-Compliant Code Examples
---- name:Create (or update) MySQL Serverazure.azcollection.azure_rm_mysqlserver:resource_group:myResourceGroupname:testserversku:name:B_Gen5_1tier:Basiclocation:eastusstorage_mb:1024version:5.6admin_username:cloudsaadmin_password:password- name:Create (or update) MySQL Server2azure.azcollection.azure_rm_mysqlserver:resource_group:myResourceGroupname:testserversku:name:B_Gen5_1tier:Basiclocation:eastusstorage_mb:1024enforce_ssl:falseversion:5.6admin_username:cloudsaadmin_password:password
1
2
rulesets:- Ansible / Azure # Rules to enforce / Azure.
맞춤형 데모 요청
Datadog 시작하기
Ask AI
AI-generated responses may be inaccurate. Verify important info.
