github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/rules/cloud/policies/azure/database/secure_tls_policy.tf.go (about) 1 package database 2 3 var terraformSecureTlsPolicyGoodExamples = []string{ 4 ` 5 resource "azurerm_mssql_server" "good_example" { 6 name = "mssqlserver" 7 resource_group_name = azurerm_resource_group.example.name 8 location = azurerm_resource_group.example.location 9 version = "12.0" 10 administrator_login = "missadministrator" 11 administrator_login_password = "thisIsKat11" 12 minimum_tls_version = "1.2" 13 } 14 15 resource "azurerm_postgresql_server" "good_example" { 16 name = "bad_example" 17 18 public_network_access_enabled = true 19 ssl_enforcement_enabled = false 20 ssl_minimal_tls_version_enforced = "TLS1_2" 21 } 22 `, 23 } 24 25 var terraformSecureTlsPolicyBadExamples = []string{ 26 ` 27 resource "azurerm_mssql_server" "bad_example" { 28 name = "mssqlserver" 29 resource_group_name = azurerm_resource_group.example.name 30 location = azurerm_resource_group.example.location 31 version = "12.0" 32 administrator_login = "missadministrator" 33 administrator_login_password = "thisIsKat11" 34 minimum_tls_version = "1.1" 35 } 36 37 resource "azurerm_postgresql_server" "bad_example" { 38 name = "bad_example" 39 40 public_network_access_enabled = true 41 ssl_enforcement_enabled = false 42 ssl_minimal_tls_version_enforced = "TLS1_1" 43 } 44 `, 45 } 46 47 var terraformSecureTlsPolicyLinks = []string{ 48 `https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/mssql_server#minimum_tls_version`, `https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/mysql_server#ssl_minimal_tls_version_enforced`, `https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresql_server#ssl_minimal_tls_version_enforced`, 49 } 50 51 var terraformSecureTlsPolicyRemediationMarkdown = ``