Ensure that minimum TLS version is set to 1.2 for Azure MSSQL Server

MEDIUM

Description

Organizations should try to utilize the latest version of TLS and modern ciphers to protect data from man-in-the-middle and similar attacks.

Remediation

In Azure Console -

  1. Open the Azure Portal and go to SQL servers.
  2. Choose the SQL server you wish to edit.
  3. Under Networking.
  4. Under Connectivity, Set Minimum TLS version to 1.2
  5. Select Save

In Terraform -

  1. In the azurerm_mssql_server resource, set minimum_tls_version to 1.2.

References:
https://learn.microsoft.com/en-us/azure/azure-sql/database/connectivity-settings?view=azuresql&tabs=azure-portal#minimal-tls-version
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/mssql_server#minimum_tls_version

Policy Details

Rule Reference ID: AC_AZURE_0134
CSP: Azure
Remediation Available: Yes
Resource Category: Database
Resource Type: SQL Server

Frameworks