Azure Service Fabric cluster not configured with cluster protection level security

Description

Service Fabric provides three levels of protection (None, Sign and EncryptAndSign) for node-to-node communication using a primary cluster certificate. Set the protection level to ensure that all node-to-node messages are encrypted and digitally signed

Code Example

resource "azurerm_service_fabric_cluster" "example" {
  ...
  + azure_active_directory {
  +     tenant_id = "tenant"
  }
  ...
            }

Remediation

Terraform

• Resource: azurerm_service_fabric_cluster
• Arguments: fabric_settings

Rule Details

Field	Value
ID	IAC-0633
Severity	LOW
IaC Type	Terraform
Frameworks	Terraform, TerraformPlan
Checkov ID	CKV_AZURE_126

References

• Checkov Rule

---