Skip to content

Azure CDN Endpoint Custom domains is not configured with HTTPS

Description

Code Example

terraform
resource "azurerm_cdn_endpoint" "example" {
  name                = "example-cdn-endpoint"
  # ... other configurations ...

+ is_https_allowed = true

  # ... other configurations ...
}

Remediation

Terraform

Resource:

  • azurerm_cdn_endpoint

Arguments:

  • is_https_allowed

Rule Details

FieldValue
IDIAC-0705
SeverityMEDIUM
IaC TypeTerraform
FrameworksTerraform,
Checkov IDCKV_AZURE_198

References