Update minimum TLS version enforcement (Azure#702)

Co-authored-by: Brooke Hamilton <[email protected]>
ARPA-H · Apr 7, 2022 · afae16d · afae16d
1 parent 0bc11e3
commit afae16d
Show file tree

Hide file tree

Showing 3 changed files with 20 additions and 11 deletions.
diff --git a/src/bicep/mlz.json b/src/bicep/mlz.json
@@ -5,7 +5,7 @@
     "_generator": {
       "name": "bicep",
       "version": "0.4.1272.37030",
-      "templateHash": "18245260038507882468"
+      "templateHash": "8556276802199947364"
     }
   },
   "parameters": {
@@ -1477,7 +1477,7 @@
             "_generator": {
               "name": "bicep",
               "version": "0.4.1272.37030",
-              "templateHash": "5240539463340820565"
+              "templateHash": "5175281369698486584"
             }
           },
           "parameters": {
@@ -1700,7 +1700,7 @@
                     "_generator": {
                       "name": "bicep",
                       "version": "0.4.1272.37030",
-                      "templateHash": "3206702832865512735"
+                      "templateHash": "3591431991821729793"
                     }
                   },
                   "parameters": {
@@ -1724,11 +1724,14 @@
                       "apiVersion": "2019-06-01",
                       "name": "[parameters('storageAccountName')]",
                       "location": "[parameters('location')]",
-                      "kind": "Storage",
+                      "kind": "StorageV2",
                       "sku": {
                         "name": "[parameters('skuName')]"
                       },
-                      "tags": "[parameters('tags')]"
+                      "tags": "[parameters('tags')]",
+                      "properties": {
+                        "minimumTlsVersion": "TLS1_2"
+                      }
                     }
                   ],
                   "outputs": {
@@ -3151,7 +3154,7 @@
             "_generator": {
               "name": "bicep",
               "version": "0.4.1272.37030",
-              "templateHash": "11486064324027397618"
+              "templateHash": "329959409495701935"
             }
           },
           "parameters": {
@@ -3260,7 +3263,7 @@
                     "_generator": {
                       "name": "bicep",
                       "version": "0.4.1272.37030",
-                      "templateHash": "3206702832865512735"
+                      "templateHash": "3591431991821729793"
                     }
                   },
                   "parameters": {
@@ -3284,11 +3287,14 @@
                       "apiVersion": "2019-06-01",
                       "name": "[parameters('storageAccountName')]",
                       "location": "[parameters('location')]",
-                      "kind": "Storage",
+                      "kind": "StorageV2",
                       "sku": {
                         "name": "[parameters('skuName')]"
                       },
-                      "tags": "[parameters('tags')]"
+                      "tags": "[parameters('tags')]",
+                      "properties": {
+                        "minimumTlsVersion": "TLS1_2"
+                      }
                     }
                   ],
                   "outputs": {

diff --git a/src/bicep/modules/storage-account.bicep b/src/bicep/modules/storage-account.bicep
@@ -11,11 +11,13 @@ param tags object = {}
 resource storageAccount 'Microsoft.Storage/storageAccounts@2019-06-01' = {
   name: storageAccountName
   location: location
-  kind: 'Storage'
+  kind: 'StorageV2'
   sku: {
     name: skuName
   }
   tags: tags
+  properties: {
+    minimumTlsVersion: 'TLS1_2'
+  }
 }
-
 output id string = storageAccount.id
diff --git a/src/terraform/modules/virtual-network/main.tf b/src/terraform/modules/virtual-network/main.tf
@@ -24,5 +24,6 @@ resource "azurerm_storage_account" "loganalytics" {
   account_tier              = "Standard"
   account_replication_type  = "LRS"
   enable_https_traffic_only = true
+  min_tls_version           = "TLS1_2"
   tags                      = var.tags
 }