Skip to content

'public network access enabled' is not set to 'False' for mySQL servers

Description

By disabling public network access and only allowing connections from trusted IP addresses or networks, you can help to mitigate these risks and ensure that only authorized users and systems are able to connect to the MySQL server. This can help to protect the server and its data from unauthorized access or attacks, and can help to maintain the confidentiality, integrity, and availability of the server and its resources.

Code Example

go
resource "azurerm_mysql_server" "examplea" {
  ...
+ public_network_access_enabled = false
}

Remediation

Terraform

  • Resource: azurerm_mysql_server
  • Arguments: public_network_access_enabled

Rule Details

FieldValue
IDIAC-0562
SeverityMEDIUM
IaC Typearm
FrameworksTerraform,
Checkov IDCKV_AZURE_53

References