Skip to content

Latest commit

 

History

History
38 lines (26 loc) · 747 Bytes

azurerm_mssql_server_azuread_authentication_only.md

File metadata and controls

38 lines (26 loc) · 747 Bytes

azurerm_mssql_server_azuread_authentication_only

Severity: Warning

Example

resource "azurerm_mssql_server" "example" {
    azuread_administrator {
        azuread_authentication_only = false
    }
}

Why

Enabling azuread_authentication_only ensures that only Azure AD identities can authenticate to the SQL server, providing enhanced security through centralized identity management and eliminating the risks associated with SQL authentication credentials.

How to Fix

resource "azurerm_mssql_server" "example" {
    azuread_administrator {
        azuread_authentication_only  = true
    }
}

How to disable

rule "azurerm_mssql_server_azuread_authentication_only" {
  enabled = false
}