MSSQL is not using the latest version of TLS encryption

Description

The Transport Layer Security (TLS) protocol secures transmission of data between servers and web browsers over the internet using standard encryption technology. To follow security best practices and the latest PCI compliance standards, enable the latest version of TLS protocol (i.e. TLS 1.2) for all your MSSQL servers.

Code Example

resource "azurerm_mssql_server" "examplea" {
   ...
 + minimum_tls_version           = "1.2"
   ...
 }

Remediation

Terraform

• Resource: azurerm_mssql_server
• Arguments: minimum_tls_version

Rule Details

Field	Value
ID	IAC-0561
Severity	MEDIUM
IaC Type	arm
Frameworks	Terraform, TerraformPlan
Checkov ID	CKV_AZURE_52

References

• Checkov Rule

---