Ensure public access is disabled for Azure IoT Hub Device Provisioning Service (DPS)

MEDIUM

Description

Allowing unrestricted, public access to cloud services could open an application up to external attack. Disallowing this access is typically considered best practice.

Remediation

In Azure Console -

  1. Go to Azure IoT Hub device provisioning service.
  2. Choose an IoT Hub device provisioning service to edit.
  3. In these Settings, Choose Networking.
  4. Click on the Public Access and Choose disabled.
  5. Click save.

In Terraform -

  1. In the azurerm_iothub_dps resource, set public_network_access_enabled to false.

References:
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/iothub_dps#public_network_access_enabled

Policy Details

Rule Reference ID: AC_AZURE_0093
CSP: Azure
Remediation Available: Yes
Resource Category: Virtual Network
Resource Type: IoT Hub

Frameworks