Azure CDN Doesn't Disable HTTP Endpoint

Description

Code Example

resource "azurerm_cdn_endpoint" "example" {
  name                = "example-cdn-endpoint"
  # ... other configurations ...

+ is_http_allowed = false

  # ... other configurations ...
}

Remediation

Terraform

Resource:

• azurerm_cdn_endpoint

Arguments:

• is_http_allowed

Rule Details

Field	Value
ID	IAC-0704
Severity	MEDIUM
IaC Type	Terraform
Frameworks	Terraform,
Checkov ID	CKV_AZURE_197

References

• Checkov Rule

---