Ensure Tencent Cloud MySQL instances intranet ports are not set to the default 3306
Description
This policy checks whether the intranet port for Tencent Cloud MySQL instances is set to the default value of 3306. Using the default port can make the instance more vulnerable to attacks, as it is a well-known port for MySQL. It is recommended to use a non-default port to add an extra layer of security. Changing the port can help prevent unauthorized access to the MySQL instance.
Code Example
terraform
resource "tencentcloud_mysql_instance" "example" {
intranet_port = 3307
}Remediation
Update the intranet port to a non-default value.
Rule Details
| Field | Value |
|---|---|
| ID | IAC-1327 |
| Severity | MEDIUM |
| IaC Type | Terraform |
| Frameworks | tencentcloud_mysql_instance |
| Checkov ID | CKV_TC_10 |