-
Notifications
You must be signed in to change notification settings - Fork 715
Closed
Labels
area-integrationsIssues pertaining to Aspire Integrations packagesIssues pertaining to Aspire Integrations packages
Description
Description
When using AddRedis().WithDataVolume(), the generated Azure Storage Account definition is missing the minimumTlsVersion: 'TLS1_2' property. This can trigger Azure security alerts and doesn't follow Azure security best practices.
Steps to Reproduce
-
Use the following code in an Aspire AppHost:
var redis = builder.AddRedis("cache") .WithLifetime(ContainerLifetime.Persistent) .WithDataVolume();
-
Publish the application to generate Bicep templates
-
Examine the generated storage account resource definition
Expected Behavior
The generated storage account should include minimumTlsVersion: 'TLS1_2' to enforce secure connections and comply with Azure security best practices.
Actual Behavior
The storage account is generated without the minimumTlsVersion property, defaulting to potentially insecure TLS versions.
Environment
- Reproduction Location:
playground/AzureContainerApps/AzureContainerApps.AppHost/Program.cs
Impact
- Triggers Azure security alerts
- Does not follow Azure security best practices
- Potential security compliance issues
Copilot
Metadata
Metadata
Assignees
Labels
area-integrationsIssues pertaining to Aspire Integrations packagesIssues pertaining to Aspire Integrations packages