Project: KICS (Provisioning / Security & Compliance)
File: 2c99a474-2a3c-4c17-8294-53ffa5ed0522.md

title: Storage Account Not Forcing HTTPS hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 2c99a474-2a3c-4c17-8294-53ffa5ed0522 Query name: Storage Account Not Forcing HTTPS Platform: Ansible Severity: <span style="color:#ff7213">Medium</span> Category: Encryption URL: Storage Accounts should enforce the use of HTTPS<br> ```yaml title="Positive test num. 1 - yaml file" hl_lines="33 3 69 42 78 15 51 24 60" name: create an account azure.azcollection.azurermstorageaccount: resource_group: myResourceGroup name: clh0002 type: Standard_RAGRS tags: testing: testing delete: on-exit name: create an account2 azure.azcollection.azurermstorageaccount: resource_group: myResourceGroup name: clh0002 type: Standard_RAGRS https_only: false tags: testing: testing delete: on-exit name: create an account3 azure.azcollection.azurermstorageaccount: resource_group: myResourceGroup name: clh0002 type: Standard_RAGRS https_only: False tags: testing: testing delete: on-exit name: create an account4 azure.azcollection.azurermstorageaccount: resource_group: myResourceGroup name: clh0002 type: Standard_RAGRS https_only: no tags: testing: testing delete: on-exit name: create an account5 azure.azcollection.azurermstorageaccount: resource_group: myResourceGroup name: clh0002 type: Standard_RAGRS https_only: No tags: testing: testing delete: on-exit name: create an account6 azure.azcollection.azurermstorageaccount: resource_group: myResourceGroup name: clh0002 type: Standard_RAGRS https_only: "false" tags: testing: testing delete: on-exit name: create an account7 azure.azcollection.azurermstorageaccount: resource_group: myResourceGroup name: clh0002 type: Standard_RAGRS https_only: "False" tags: testing: testing delete: on-exit name: create an account8 azure.azcollection.azurermstorageaccount: resource_group: myResourceGroup name: clh0002 type: Standard_RAGRS https_only: "no" tags: testing: testing delete: on-exit name: create an account9 azure.azcollection.azurermstorageaccount: resource_group: myResourceGroup name: clh0002 type: Standard_RAGRS https_only: "No" tags: testing: testing delete: on-exit ``` ```yaml title="Negative test num. 1 - yaml file" name: create an account azure.azcollection.azurermstorageaccount: resource_group: myResourceGroup name: clh0002 type: Standard_RAGRS https_only: yes tags: testing: testing delete: on-exit name: create an account2 azure.azcollection.azurermstorageaccount: resource_group: myResourceGroup name: clh0002 type: Standard_RAGRS https_only: true tags: testing: testing delete: on-exit name: create an account3 azure.azcollection.azurermstorageaccount: resource_group: myResourceGroup name: clh0002 type: Standard_RAGRS https_only: true tags: testing: testing delete: on-exit name: create an account4 azure.azcollection.azurermstorageaccount: resource_group: myResourceGroup name: clh0002 type: Standard_RAGRS https_only: 'true' tags: testing: testing delete: on-exit name: create an account5 azure.azcollection.azurermstorageaccount: resource_group: myResourceGroup name: clh0002 type: Standard_RAGRS https_only: 'True' tags: testing: testing delete: on-exit name: create an account6 azure.azcollection.azurermstorageaccount: resource_group: myResourceGroup name: clh0002 type: Standard_RAGRS https_only: yes tags: testing: testing delete: on-exit name: create an account7 azure.azcollection.azurermstorageaccount: resource_group: myResourceGroup name: clh0002 type: Standard_RAGRS https_only: Yes tags: testing: testing delete: on-exit name: create an account8 azure.azcollection.azurermstorageaccount: resource_group: myResourceGroup name: clh0002 type: Standard_RAGRS https_only: Yes tags: testing: testing delete: on-exit ```