Ensure Azure Spring Cloud API Portal is enabled for HTTPS

Error: Azure Spring Cloud API Portal is not enabled for HTTPS

Bridgecrew Policy ID: BC_AZR_NETWORKING_62
Checkov Check ID: CKV_AZURE_161
Severity: LOW

Azure Spring Cloud API Portal is not enabled for HTTPS

Description

Enabling HTTPS for your Azure Spring Cloud API Portal can help improve the security of your API portal. HTTPS is a secure protocol that encrypts data in transit, and using it can help prevent attackers from intercepting and reading your data.

Fix - Runtime

Fix - Buildtime

Resource: azurerm_spring_cloud_api_portal
Attribute: https_only_enabled

resource "azurerm_spring_cloud_api_portal" "pass" {
  name                          = "default"
  spring_cloud_service_id       = azurerm_spring_cloud_service.example.id
  gateway_ids                   = [azurerm_spring_cloud_gateway.example.id]
  https_only_enabled            = true
  public_network_access_enabled = true
  instance_count                = 1
  sso {
    client_id     = "test"
    client_secret = "secret"
    issuer_uri    = "https://www.example.com/issueToken"
    scope         = ["read"]
  }
}