README.md

Rules

Rules Index

Name	Severity	Enabled
azurerm_container_group_image_registry_credential_identity	Warning	✔
azurerm_eventhub_namespace_public_network_access_enabled	Notice	✔
azurerm_eventhub_namespace_unsecure_tls	Warning	✔
azurerm_iothub_endpoint_eventhub_authentication_type	Notice	✔
azurerm_key_vault_certificate_lifetime_action	Warning	✔
azurerm_key_vault_enable_rbac_authorization	Warning
azurerm_key_vault_key_rotation_policy	Warning	✔
azurerm_key_vault_public_network_access_enabled	Notice	✔
azurerm_keyvault_features_check	Warning	✔
azurerm_linux_function_app_ftps_state	Warning	✔
azurerm_linux_function_app_https_only	Warning	✔
azurerm_linux_function_app_minimum_tls_version	Warning	✔
azurerm_linux_function_app_slot_ftps_state	Warning	✔
azurerm_linux_function_app_slot_https_only	Warning	✔
azurerm_linux_function_app_slot_minimum_tls_version	Warning	✔
azurerm_linux_web_app_ftps_state	Warning	✔
azurerm_linux_web_app_https_only	Warning	✔
azurerm_linux_web_app_minimum_tls_version	Warning	✔
azurerm_linux_web_app_slot_ftps_state	Warning	✔
azurerm_linux_web_app_slot_https_only	Warning	✔
azurerm_linux_web_app_slot_minimum_tls_version	Warning	✔
azurerm_mssql_database_encryption	Warning	✔
azurerm_mssql_firewall_rule_all_allowed	Error	✔
azurerm_mssql_server_azuread_authentication_only	Warning	✔
azurerm_mssql_server_public_network_access_enabled	Notice	✔
azurerm_mssql_server_unsecure_tls	Warning	✔
azurerm_redis_cache_active_directory_authentication_enabled	Notice	✔
azurerm_redis_cache_minimum_tls_version	Warning	✔
azurerm_redis_cache_non_ssl_port_enabled	Warning	✔
azurerm_storage_account_https_traffic_only_enabled	Warning	✔
azurerm_storage_account_public_network_access_enabled	Notice	✔
azurerm_storage_account_unsecure_tls	Warning	✔
azurerm_windows_function_app_ftps_state	Warning	✔
azurerm_windows_function_app_https_only	Warning	✔
azurerm_windows_function_app_minimum_tls_version	Warning	✔
azurerm_windows_function_app_slot_ftps_state	Warning	✔
azurerm_windows_function_app_slot_https_only	Warning	✔
azurerm_windows_function_app_slot_minimum_tls_version	Warning	✔
azurerm_windows_web_app_ftps_state	Warning	✔
azurerm_windows_web_app_https_only	Warning	✔
azurerm_windows_web_app_minimum_tls_version	Warning	✔
azurerm_windows_web_app_slot_ftps_state	Warning	✔
azurerm_windows_web_app_slot_https_only	Warning	✔
azurerm_windows_web_app_slot_minimum_tls_version	Warning	✔

Rules by Resource

azurerm_container_group

• azurerm_container_group_image_registry_credential_identity

azurerm_eventhub_namespace

• azurerm_eventhub_namespace_public_network_access_enabled
• azurerm_eventhub_namespace_unsecure_tls

azurerm_iothub_endpoint_eventhub

• azurerm_iothub_endpoint_eventhub_authentication_type

azurerm_key_vault

• azurerm_key_vault_enable_rbac_authorization
• azurerm_key_vault_public_network_access_enabled
• azurerm_keyvault_features_check

azurerm_key_vault_certificate

• azurerm_key_vault_certificate_lifetime_action

azurerm_key_vault_key

• azurerm_key_vault_key_rotation_policy

azurerm_linux_function_app

• azurerm_linux_function_app_ftps_state
• azurerm_linux_function_app_https_only
• azurerm_linux_function_app_minimum_tls_version

azurerm_linux_function_app_slot

• azurerm_linux_function_app_slot_ftps_state
• azurerm_linux_function_app_slot_https_only
• azurerm_linux_function_app_slot_minimum_tls_version

azurerm_linux_web_app

• azurerm_linux_web_app_ftps_state
• azurerm_linux_web_app_https_only
• azurerm_linux_web_app_minimum_tls_version

azurerm_linux_web_app_slot

• azurerm_linux_web_app_slot_ftps_state
• azurerm_linux_web_app_slot_https_only
• azurerm_linux_web_app_slot_minimum_tls_version

azurerm_mssql_database

• azurerm_mssql_database_encryption

azurerm_mssql_firewall_rule

• azurerm_mssql_firewall_rule_all_allowed

azurerm_mssql_server

• azurerm_mssql_server_azuread_authentication_only
• azurerm_mssql_server_public_network_access_enabled
• azurerm_mssql_server_unsecure_tls

azurerm_redis_cache

• azurerm_redis_cache_active_directory_authentication_enabled
• azurerm_redis_cache_minimum_tls_version
• azurerm_redis_cache_non_ssl_port_enabled

azurerm_storage_account

• azurerm_storage_account_https_traffic_only_enabled
• azurerm_storage_account_public_network_access_enabled
• azurerm_storage_account_unsecure_tls

azurerm_windows_function_app

• azurerm_windows_function_app_ftps_state
• azurerm_windows_function_app_https_only
• azurerm_windows_function_app_minimum_tls_version

azurerm_windows_function_app_slot

• azurerm_windows_function_app_slot_ftps_state
• azurerm_windows_function_app_slot_https_only
• azurerm_windows_function_app_slot_minimum_tls_version

azurerm_windows_web_app

• azurerm_windows_web_app_ftps_state
• azurerm_windows_web_app_https_only
• azurerm_windows_web_app_minimum_tls_version

azurerm_windows_web_app_slot

• azurerm_windows_web_app_slot_ftps_state
• azurerm_windows_web_app_slot_https_only
• azurerm_windows_web_app_slot_minimum_tls_version