Communication over HTTP

이 제품은 선택한 Datadog 사이트에서 지원되지 않습니다. ().
이 페이지는 아직 한국어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Metadata

Id: 2e8d4922-8362-4606-8c14-aa10466a1ce3

Cloud Provider: Common

Platform: Ansible

Severity: Medium

Category: Insecure Configurations

Learn More

Description

Using HTTP URLs in Ansible uri tasks exposes requests and any sensitive data (tokens, credentials, or cookies) to interception and tampering because traffic is sent in plaintext. Tasks that use the ansible.builtin.uri module should have a url property that begins with https://. Tasks whose url starts with http:// are flagged and should be updated to use https:// endpoints or other secure transport.

Secure example:

- name: Call API over HTTPS
  ansible.builtin.uri:
    url: "https://api.example.com/endpoint"
    method: GET

Compliant Code Examples

- name: Verificar o status de um site usando o módulo uri
  hosts: localhost
  tasks:
    - name: Verificar o status do site
      ansible.builtin.uri:
        url: "https://www.example.com"
        method: GET
      register: site_response

    - name: Exibir resposta do site
      debug:
        var: site_response

Non-Compliant Code Examples

- name: Verificar o status de um site usando o módulo uri
  hosts: localhost
  tasks:
    - name: Verificar o status do site
      ansible.builtin.uri:
        url: "http://www.example.com"
        method: GET
      register: site_response

    - name: Exibir resposta do site
      debug:
        var: site_response