Skip to content

Azure container container group is not deployed into a virtual network

Description

A virtual network is a logical network in Azure that is isolated from other networks. When you deploy a container group into a virtual network, you can control the inbound and outbound network traffic to and from your container group using network security groups (NSGs) and service endpoints. This can help to improve the security of your container group and protect it from unauthorized access or attacks.

Code Example

go
resource "azurerm_container_group" "example" {
              ...
              
  +           network_profile_id = "network_profile_id"    
            }

Remediation

Terraform

  • Resource: azurerm_container_group
  • Arguments: network_profile_id

Rule Details

FieldValue
IDIAC-0605
SeverityLOW
IaC TypeTerraform
FrameworksTerraform,
Checkov IDCKV_AZURE_98

References