turbot/steampipe-mod-terraform-azure-compliance

Control: Ensure 'TLS Version' is set to 'TLSV1.2' for MySQL flexible Database Server

Description

Ensure TLS version on MySQL flexible servers is set to the default value.

Usage

Run the control in your terminal:

powerpipe control run terraform_azure_compliance.control.mysql_server_min_tls_1_2

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_azure_compliance.control.mysql_server_min_tls_1_2 --share

SQL

This control uses a named query:

select
address as resource,
case
when ((attributes_std -> 'ssl_minimal_tls_version_enforced') is null)
or ((attributes_std ->> 'ssl_minimal_tls_version_enforced') = 'TLS1_2') then 'ok'
else 'alarm'
end status,
split_part(address, '.', 2) || case
when ((attributes_std -> 'ssl_minimal_tls_version_enforced') is null)
or ((attributes_std ->> 'ssl_minimal_tls_version_enforced') = 'TLS1_2') then ' not using the latest version of TLS encryption'
else ' using the latest version of TLS encryption'
end || '.' reason
, path || ':' || start_line
from
terraform_resource
where
type = 'azurerm_mysql_server';

Tags