Skip to content

Azure MariaDB database server with SSL connection disabled

Description

Azure Database for MariaDB supports connecting your Azure Database for MariaDB server to client applications using Secure Sockets Layer (SSL). Enforcing SSL connections between your database server and your client applications helps protect against 'man in the middle' attacks by encrypting the data stream between the server and your application. This configuration enforces that SSL is always enabled for accessing your database server.

Code Example

go
resource "azurerm_mariadb_server" "example" {
  ...
+  ssl_enforcement_enabled = true
}

Remediation

Terraform

  • Resource: azurerm_mariadb_server
  • Arguments: ssl_enforcement_enabled

Rule Details

FieldValue
IDIAC-0557
SeverityLOW
IaC Typearm
FrameworksARM,
Checkov IDCKV_AZURE_47

References