Azure Cosmos DB enables public network access

Description

By ensuring that your Azure Cosmos DB is not public, you can help protect your data from unauthorized access or tampering. Public Azure Cosmos DBs are accessible over the internet, which can make them vulnerable to external threats such as hackers or malware. By making it private, you can help ensure that only authorized users can access the data.

Code Example

resource "azurerm_cosmosdb_account" "db" {
        ...
 +    public_network_access_enabled = false

}

Remediation

Terraform

• Resource: azurerm_cosmosdb_account
• Arguments: public_network_access_enabled

Rule Details

Field	Value
ID	IAC-0608
Severity	LOW
IaC Type	arm
Frameworks	Terraform,
Checkov ID	CKV_AZURE_101

References

• Checkov Rule

---