API Management with Public Access

Description

Code Example

resource "azurerm_api_management" "example" {
  name                = "example-api"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
  publisher_name      = "My Company"
  publisher_email     = "[email protected]"

+ public_network_access_enabled = false

  tags = {
    Environment = "production"
  }
}

Remediation

Terraform

• Resource: azurerm_api_management
• Arguments: public_network_access_enabled

Rule Details

Field	Value
ID	IAC-0681
Severity	MEDIUM
IaC Type	arm
Frameworks	Terraform,
Checkov ID	CKV_AZURE_174

References

• Checkov Rule

---