turbot/azure_compliance

Control: 3.12 Ensure the 'Minimum TLS version' is set to 'Version 1.2'

Description

TLS 1.0 has known vulnerabilities and has been replaced by later versions of the TLS protocol. Continued use of this legacy protocol affects the security of data in transit.

Remediation

From Console

  1. Login to Azure Portal
  2. Go to Storage Accounts
  3. Click on each Storage Account
  4. Under Setting section, Click on Configuration
  5. Set the minimum TLS version to be Version 1.2

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.cis_v140_3_12

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.cis_v140_3_12 --share

SQL

This control uses a named query:

storage_account_min_tls_1_2

Tags