bridgecrewio / checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
https://www.checkov.io/
Apache License 2.0
7k stars 1.1k forks source link

[CKV_AZURE_218] Ensure Application Gateway defines secure protocols for in transit communication. #5396

Closed GunasheelaSatharasi closed 7 months ago

GunasheelaSatharasi commented 1 year ago

Describe the issue Even though I enabled port 443 with ssl_policy block still checkov scan fail saying Ensure Application Gateway defines secure protocols for in transit communication.

Examples Variables declared: frontend_port_name = "port_443"
frontend_port = 443

ssl_policy = { name = "AppGwSslPolicy20220101" policy_type = "Predefined"
cipher_suites = null
min_protocol_version = "TLSv1_2"
}

code: dynamic "ssl_policy" { for_each = var.ssl_policy != null ? [1] : [] content { policy_name = var.ssl_policy.policy_name policy_type = var.ssl_policy.policy_type cipher_suites = var.ssl_policy.cipher_suites min_protocol_version = var.ssl_policy_min_protocol_version } } Version (please complete the following information):

Additional context Add any other context about the problem here.

stale[bot] commented 7 months ago

Thanks for contributing to Checkov! We've automatically marked this issue as stale to keep our issues list tidy, because it has not had any activity for 6 months. It will be closed in 14 days if no further activity occurs. Commenting on this issue will remove the stale tag. If you want to talk through the issue or help us understand the priority and context, feel free to add a comment or join us in the Checkov slack channel at codifiedsecurity.slack.com Thanks!

stale[bot] commented 7 months ago

Closing issue due to inactivity. If you feel this is in error, please re-open, or reach out to the community via slack: codifiedsecurity.slack.com Thanks!