Skip to content

Azure Cognitive Search With Global IP Allowance

Description

Code Example

terraform
resource "azurerm_search_service" "example" {
  name                = "example-search-service"
  # ... other configurations ...

+ allowed_ips = [
+   "192.168.1.0/24",   # A specific trusted CIDR range.
+   # ... other allowed IPs ...
+ ]

  # ... other configurations ...
}

Remediation

Terraform

Resource:

  • azurerm_search_service

Arguments:

  • allowed_ips

Rule Details

FieldValue
IDIAC-0717
SeverityMEDIUM
IaC TypeTerraform
FrameworksTerraform,
Checkov IDCKV_AZURE_210

References