Ensure public access is disabled for Azure Search Service

HIGH

Description

Allowing unrestricted, public access to cloud services could open an application up to external attack. Disallowing this access is typically considered best practice.

Remediation

In Azure Console -

  1. Open the Azure Portal and go to Cognitive Search.
  2. Select the Cognitive Search service you wish to edit.
  3. Under Settings, select Networking.
  4. For Public Network Access, set to Disabled.
  5. Configure Private network access as needed.

In Terraform -

  1. In the azurerm_search_service resource, set public_network_access_enabled to false.

References:
https://learn.microsoft.com/en-us/azure/search/search-what-is-azure-search
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/search_service#public_network_access_enabled

Policy Details

Rule Reference ID: AC_AZURE_0307
CSP: Azure
Remediation Available: Yes
Resource Category: Analytics
Resource Type: Search Service

Frameworks