Control: Storage accounts should use latest minimum TLS version

Description

Use the latest minimum TLS version for your storage accounts to ensure that your data is encrypted in transit.

Usage

Run the control in your terminal:

powerpipe control run terraform_azure_compliance.control.storage_account_uses_latest_minimum_tls_version

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_azure_compliance.control.storage_account_uses_latest_minimum_tls_version --share

SQL

This control uses a named query:

select
  address as resource,
  case
    when (attributes_std ->> 'min_tls_version') in ('TLS1_2', 'TLS1_3') then 'ok'
    else 'alarm'
  end status,
  split_part(address, '.', 2) || case
    when (attributes_std ->> 'min_tls_version') in ('TLS1_2', 'TLS1_3') then ' use latest version of TLS encryption'
    when (attributes_std ->> 'min_tls_version') is null then ' version of TLS encryption is not set'
    else ' does not uses latest version of TLS encryption'
  end || '.' reason
  
  , path || ':' || start_line
from
  terraform_resource
where
  type = 'azurerm_storage_account';