Ensure Azure Spring Cloud API Portal is enabled for HTTPS
Error: Azure Spring Cloud API Portal is not enabled for HTTPS
Bridgecrew Policy ID: BC_AZR_NETWORKING_62
Checkov Check ID: CKV_AZURE_161
Severity: LOW
Azure Spring Cloud API Portal is not enabled for HTTPS
Description
Enabling HTTPS for your Azure Spring Cloud API Portal can help improve the security of your API portal. HTTPS is a secure protocol that encrypts data in transit, and using it can help prevent attackers from intercepting and reading your data.
Fix - Runtime
Fix - Buildtime
Resource: azurerm_spring_cloud_api_portal
Attribute: https_only_enabled
resource "azurerm_spring_cloud_api_portal" "pass" {
name = "default"
spring_cloud_service_id = azurerm_spring_cloud_service.example.id
gateway_ids = [azurerm_spring_cloud_gateway.example.id]
https_only_enabled = true
public_network_access_enabled = true
instance_count = 1
sso {
client_id = "test"
client_secret = "secret"
issuer_uri = "https://www.example.com/issueToken"
scope = ["read"]
}
}
Updated 3 months ago