Storage account not using latest TLS encryption version

이 제품은 선택한 Datadog 사이트에서 지원되지 않습니다. ().
이 페이지는 아직 한국어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Metadata

Id: ansible-azure-storage-account-not-using-latest-tls-encryption-version

Provider: Azure

Platform: Ansible

Severity: Medium

Category: Encryption

Learn More

Description

Storage accounts must enforce TLS 1.2 to protect data in transit and prevent downgrade attacks using older, vulnerable TLS versions. For Ansible, the azure_rm_storageaccount or azure.azcollection.azure_rm_storageaccount resource must include the minimum_tls_version property set to "TLS1_2". Resources missing minimum_tls_version or configured with any value other than "TLS1_2" (for example "TLS1_0" or "TLS1_1") are flagged.

Compliant Code Examples

- name: Create an account with kind of FileStorage
  azure_rm_storageaccount:
    resource_group: myResourceGroup
    name: c1h0002
    type: Premium_LRS
    kind: FileStorage
    minimum_tls_version: TLS1_2
    tags:
      testing: testing

Non-Compliant Code Examples

---
- name: Create an account with kind of FileStorage
  azure_rm_storageaccount:
    resource_group: myResourceGroup
    name: c1h0002
    type: Premium_LRS
    kind: FileStorage
    minimum_tls_version: TLS1_0
    tags:
      testing: testing
- name: Create a second account with kind of FileStorage
  azure_rm_storageaccount:
    resource_group: myResourceGroup
    name: clh0003
    type: Premium_LRS
    kind: FileStorage