-
Notifications
You must be signed in to change notification settings - Fork 1
Create main.tf #10
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Create main.tf #10
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,15 @@ | ||
| data "azurerm_resource_group" "terraformstorage" { | ||
| name = "DevOpsSecurity" | ||
| } | ||
|
|
||
| resource "azurerm_storage_account" "terraformaccount1" { | ||
| name = "devopssecurity1" | ||
| resource_group_name = data.azurerm_resource_group.terraformstorage.name | ||
| location = "Central US" | ||
| account_tier = "Standard" | ||
| account_replication_type = "GRS" | ||
|
|
||
| enable_https_traffic_only = false | ||
| public_network_access_enabled = true | ||
|
|
||
| } | ||
|
Comment on lines
+5
to
+15
Check failureCode scanning / checkov Ensure Storage logging is enabled for Queue service for read, write and delete requests
Ensure Storage logging is enabled for Queue service for read, write and delete requests
Comment on lines
+5
to
+15
Check failureCode scanning / checkov Ensure Storage Account is using the latest version of TLS encryption
Ensure Storage Account is using the latest version of TLS encryption
Comment on lines
+5
to
+15
Check failureCode scanning / checkov Ensure that 'enable_https_traffic_only' is enabled
Ensure that 'enable_https_traffic_only' is enabled
Comment on lines
+5
to
+15
Check failureCode scanning / checkov Ensure that Storage blobs restrict public access
Ensure that Storage blobs restrict public access
Comment on lines
+5
to
+15
Check failureCode scanning / checkov Ensure storage account is not configured with Shared Key authorization
Ensure storage account is not configured with Shared Key authorization
Comment on lines
+5
to
+15
Check failureCode scanning / checkov Ensure storage account is configured without blob anonymous access
Ensure storage account is configured without blob anonymous access
Comment on lines
+5
to
+15
Check failureCode scanning / checkov Ensure storage account is configured with private endpoint
Ensure storage account is configured with private endpoint
Comment on lines
+5
to
+15
Check failureCode scanning / checkov Ensure storage account is configured with SAS expiration policy
Ensure storage account is configured with SAS expiration policy
Comment on lines
+5
to
+15
Check failureCode scanning / checkov Ensure soft-delete is enabled on Azure storage account
Ensure soft-delete is enabled on Azure storage account
Comment on lines
+5
to
+15
Check failureCode scanning / checkov Ensure storage for critical data are encrypted with Customer Managed Key
Ensure storage for critical data are encrypted with Customer Managed Key
|
||
Check notice
Code scanning / checkov
Ensure that Storage accounts disallow public access