Skip to content

Active Directory is not used for authentication for Service Fabric

Description

A Service Fabric cluster requires creating Azure Active Directory (AD) applications to control access to the cluster: one web application and one native application. After the applications are created, you will be required to assign users to read-only and admin roles.

Code Example

go
resource "azurerm_service_fabric_cluster" "example" {
  ...
  + azure_active_directory {
  +     tenant_id = "tenant"
  }
  ...
            }

Remediation

Terraform

  • Resource: azurerm_service_fabric_cluster
  • Arguments: azure_active_directory - (Optional) An azure_active_directory block as defined below.

Rule Details

FieldValue
IDIAC-0632
SeverityLOW
IaC Typearm
FrameworksTerraform, TerraformPlan
Checkov IDCKV_AZURE_125

References