| Vulnerability Database

Storage account should have secure transfer and minimum TLS version configured

Storage accounts should enforce HTTPS for secure data transfer and use a minimum TLS version of 1.2. This ensures that logs and data stored in the storage account are encrypted in transit. Azure Storage encrypts all data at rest by default, but transport encryption is also critical.

Impact

Recommended Actions

Follow the appropriate remediation steps below to resolve the issue.

Enable secure transfer and set minimum TLS version to TLS1_2

1
2
3
4
5
6
7
8
9


resource "azurerm_storage_account" "good_example" {
  name                       = "storageaccountname"
  resource_group_name        = azurerm_resource_group.example.name
  location                   = azurerm_resource_group.example.location
  account_tier               = "Standard"
  account_replication_type   = "GRS"
  https_traffic_only_enabled = true
  min_tls_version            = "TLS1_2"
}

1
2
3
4
5
6
7


resource "azurerm_storage_account" "bad_example" {
  name                     = "storageaccountname"
  resource_group_name      = azurerm_resource_group.example.name
  location                 = azurerm_resource_group.example.location
  account_tier             = "Standard"
  account_replication_type = "GRS"
}

Storage account should have secure transfer and minimum TLS version configured

Impact

Recommended Actions

Remediation Links

Links