Add a storage account to resource group #95
Conversation
Add storage account (blob store) in order to shunt large database backup files to Azure from AWS.
eternaltyro
added
enhancement
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| resource "azurerm_storage_account" "raw-data" { | ||
| name = "rawdata" | ||
| resource_group_name = azurerm_resource_group.raw-data.name | ||
| location = azurerm_resource_group.raw-data.location | ||
| account_tier = "Standard" | ||
| account_replication_type = "LRS" | ||
|
|
||
| tags = local.required_tags | ||
| } |
Check failure
Code scanning / checkov
Ensure that Storage blobs restrict public access
| resource "azurerm_storage_account" "raw-data" { | ||
| name = "rawdata" | ||
| resource_group_name = azurerm_resource_group.raw-data.name | ||
| location = azurerm_resource_group.raw-data.location | ||
| account_tier = "Standard" | ||
| account_replication_type = "LRS" | ||
|
|
||
| tags = local.required_tags | ||
| } |
Check failure
Code scanning / checkov
Ensure that Storage Accounts use replication
| resource "azurerm_storage_account" "raw-data" { | ||
| name = "rawdata" | ||
| resource_group_name = azurerm_resource_group.raw-data.name | ||
| location = azurerm_resource_group.raw-data.location | ||
| account_tier = "Standard" | ||
| account_replication_type = "LRS" | ||
|
|
||
| tags = local.required_tags | ||
| } |
Check failure
Code scanning / checkov
Ensure Storage Account is using the latest version of TLS encryption
| resource "azurerm_storage_account" "raw-data" { | ||
| name = "rawdata" | ||
| resource_group_name = azurerm_resource_group.raw-data.name | ||
| location = azurerm_resource_group.raw-data.location | ||
| account_tier = "Standard" | ||
| account_replication_type = "LRS" | ||
|
|
||
| tags = local.required_tags | ||
| } |
Check failure
Code scanning / checkov
Ensure Storage logging is enabled for Queue service for read, write and delete requests
| resource "azurerm_storage_account" "raw-data" { | ||
| name = "rawdata" | ||
| resource_group_name = azurerm_resource_group.raw-data.name | ||
| location = azurerm_resource_group.raw-data.location | ||
| account_tier = "Standard" | ||
| account_replication_type = "LRS" | ||
|
|
||
| tags = local.required_tags | ||
| } |
Check failure
Code scanning / checkov
Ensure that Storage Accounts use customer-managed key for encryption
| resource "azurerm_storage_account" "raw-data" { | ||
| name = "rawdata" | ||
| resource_group_name = azurerm_resource_group.raw-data.name | ||
| location = azurerm_resource_group.raw-data.location | ||
| account_tier = "Standard" | ||
| account_replication_type = "LRS" | ||
|
|
||
| tags = local.required_tags | ||
| } |
Check failure
Code scanning / checkov
Ensure storage for critical data are encrypted with Customer Managed Key
| resource "azurerm_storage_account" "raw-data" { | ||
| name = "rawdata" | ||
| resource_group_name = azurerm_resource_group.raw-data.name | ||
| location = azurerm_resource_group.raw-data.location | ||
| account_tier = "Standard" | ||
| account_replication_type = "LRS" | ||
|
|
||
| tags = local.required_tags | ||
| } |
Check failure
Code scanning / checkov
Ensure that Storage accounts disallow public access
Add storage account (blob store) in order to shunt large database backup files to Azure from AWS.