Project: KICS (Provisioning / Security & Compliance)
File: 961ce567-a16d-4d7d-9027-f0ec2628a555.md

title: SSL Enforce Disabled hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 961ce567-a16d-4d7d-9027-f0ec2628a555 Query name: SSL Enforce Disabled Platform: Ansible Severity: <span style="color:#ff7213">Medium</span> Category: Encryption URL: Make sure that for PosgreSQL, the 'Enforce SSL connection' is set to 'ENABLED'<br> ```yaml title="Positive test num. 1 - yaml file" hl_lines="2 21" name: Create (or update) PostgreSQL Server azure.azcollection.azurermpostgresqlserver: resource_group: myResourceGroup name: testserver sku: name: BGen51 tier: Basic location: eastus storage_mb: 1024 admin_username: cloudsa admin_password: password name: Create (or update) PostgreSQL Server2 azure.azcollection.azurermpostgresqlserver: resource_group: myResourceGroup name: testserver sku: name: BGen51 tier: Basic location: eastus storage_mb: 1024 enforce_ssl: no admin_username: cloudsa admin_password: password ``` ```yaml title="Negative test num. 1 - yaml file" name: Create (or update) PostgreSQL Server azure.azcollection.azurermpostgresqlserver: resource_group: myResourceGroup name: testserver sku: name: BGen51 tier: Basic location: eastus storage_mb: 1024 enforce_ssl: yes admin_username: cloudsa admin_password: password name: Create (or update) PostgreSQL Server2 azure.azcollection.azurermpostgresqlserver: resource_group: myResourceGroup name: testserver sku: name: BGen51 tier: Basic location: eastus storage_mb: 1024 enforce_ssl: Yes admin_username: cloudsa admin_password: password name: Create (or update) PostgreSQL Server3 azure.azcollection.azurermpostgresqlserver: resource_group: myResourceGroup name: testserver sku: name: BGen51 tier: Basic location: eastus storage_mb: 1024 enforce_ssl: true admin_username: cloudsa admin_password: password name: Create (or update) PostgreSQL Server4 azure.azcollection.azurermpostgresqlserver: resource_group: myResourceGroup name: testserver sku: name: BGen51 tier: Basic location: eastus storage_mb: 1024 enforce_ssl: true admin_username: cloudsa admin_password: password name: Create (or update) PostgreSQL Server5 azure.azcollection.azurermpostgresqlserver: resource_group: myResourceGroup name: testserver sku: name: BGen51 tier: Basic location: eastus storage_mb: 1024 enforce_ssl: yes admin_username: cloudsa admin_password: password name: Create (or update) PostgreSQL Server6 azure.azcollection.azurermpostgresqlserver: resource_group: myResourceGroup name: testserver sku: name: BGen51 tier: Basic location: eastus storage_mb: 1024 enforce_ssl: Yes admin_username: cloudsa admin_password: password name: Create (or update) PostgreSQL Server7 azure.azcollection.azurermpostgresqlserver: resource_group: myResourceGroup name: testserver sku: name: BGen51 tier: Basic location: eastus storage_mb: 1024 enforce_ssl: 'true' admin_username: cloudsa admin_password: password name: Create (or update) PostgreSQL Server8 azure.azcollection.azurermpostgresqlserver: resource_group: myResourceGroup name: testserver sku: name: BGen51 tier: Basic location: eastus storage_mb: 1024 enforce_ssl: 'True' admin_username: cloudsa admin_password: password ```