Active Directory is not used for authentication for Service Fabric
Description
A Service Fabric cluster requires creating Azure Active Directory (AD) applications to control access to the cluster: one web application and one native application. After the applications are created, you will be required to assign users to read-only and admin roles.
Code Example
go
resource "azurerm_service_fabric_cluster" "example" {
...
+ azure_active_directory {
+ tenant_id = "tenant"
}
...
}Remediation
Terraform
- Resource: azurerm_service_fabric_cluster
- Arguments: azure_active_directory - (Optional) An azure_active_directory block as defined below.
Rule Details
| Field | Value |
|---|---|
| ID | IAC-0632 |
| Severity | LOW |
| IaC Type | arm |
| Frameworks | Terraform, TerraformPlan |
| Checkov ID | CKV_AZURE_125 |