Azure SQL servers which doesn't have Azure Active Directory admin configured

Description

Code Example

data "azurerm_client_config" "current" {}

resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "West Europe"
}

resource "azurerm_sql_server" "sql_server_good" {
  name                         = "mysqlserver"
  resource_group_name          = azurerm_resource_group.example.name
  location                     = azurerm_resource_group.example.location
  version                      = "12.0"
  administrator_login          = "4dm1n157r470r"
  administrator_login_password = "4-v3ry-53cr37-p455w0rd"
}


resource "azurerm_sql_active_directory_administrator" "example" {
+ server_name         = azurerm_sql_server.sql_server_good.name
  resource_group_name = azurerm_resource_group.example.name
  login               = "sqladmin"
  tenant_id           = data.azurerm_client_config.current.tenant_id
  object_id           = data.azurerm_client_config.current.object_id
}

Remediation

Terraform

• Resource: azurerm_resource_group, azurerm_sql_server, azurerm_sql_active_directory_administrator
• Arguments: server_name (of azurerm_sql_active_directory_administrator)

Rule Details

Field	Value
ID	IAC-0765
Severity	LOW
IaC Type	Terraform
Frameworks	Terraform, TerraformPlan
Checkov ID	CKV2_AZURE_7

References

• Checkov Rule

---