Skip to content

SQL Server is enabled for public network access

Description

By ensuring that your SQL server is not public, you can help protect your data from unauthorized access or tampering. Public SQL servers are accessible over the internet, which can make them vulnerable to external threats such as hackers or malware. By making it private, you can help ensure that only authorized users can access the data.

Code Example

go
resource "azurerm_mssql_server" "example" {
              ...
 +            public_network_access_enabled = false
            }

Remediation

Terraform

  • Resource: azurerm_mssql_server
  • Arguments: public_network_access_enabled

Rule Details

FieldValue
IDIAC-0620
SeverityLOW
IaC Typearm
FrameworksTerraform,
Checkov IDCKV_AZURE_113

References