Skip to content

Commit

Permalink
APPSEC-1049 Validate S6382 for ARM (#3024)
Browse files Browse the repository at this point in the history
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
  • Loading branch information
daniel-teuchert-sonarsource authored Sep 11, 2023
1 parent 823100a commit 8e2f026
Showing 1 changed file with 7 additions and 7 deletions.
14 changes: 7 additions & 7 deletions rules/S6382/azureresourcemanager/rule.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -290,7 +290,7 @@ resource example 'Microsoft.SignalRService/webPubSub@2020-07-01-preview' = {
name: 'example'
properties: {
tls: {
clientCertEnabled: true // Compliant
clientCertEnabled: true
}
}
}
Expand Down Expand Up @@ -320,7 +320,7 @@ resource example 'Microsoft.SignalRService/webPubSub@2020-07-01-preview' = {
resource example 'Microsoft.Web/sites@2015-08-01' = {
name: 'example'
properties: {
clientCertEnabled: true // Compliant
clientCertEnabled: true
clientCertMode: 'Required'
}
}
Expand Down Expand Up @@ -353,7 +353,7 @@ resource example 'Microsoft.Web/sites@2015-08-01' = {
name: 'example'
properties: {
clientCertEnabled: true
clientCertMode: 'Required' // Sensitive
clientCertMode: 'Required'
}
}
----
Expand Down Expand Up @@ -384,7 +384,7 @@ resource example 'Microsoft.App/containerApps@2022-03-01' = {
name: 'example'
properties: {
ingress: {
clientCertificateMode: 'require' // Sensitive
clientCertificateMode: 'require'
}
}
}
Expand Down Expand Up @@ -420,7 +420,7 @@ resource example 'Microsoft.DataFactory/factories/linkedservices@2018-06-01' = {
properties: {
type: 'Web'
typeProperties: {
authenticationType: 'ClientCertificate' // Compliant
authenticationType: 'ClientCertificate'
}
}
}
Expand Down Expand Up @@ -455,7 +455,7 @@ Where a list of permitted client certificates must be provided:
resource example 'Microsoft.DocumentDB/cassandraClusters@2021-10-15' = {
name: 'example'
properties: {
clientCertificates: [ // Compliant
clientCertificates: [
{
pem: '[base64-encoded certificate]'
}
Expand Down Expand Up @@ -497,7 +497,7 @@ resource example 'Microsoft.ContainerRegistry/registries/tokens@2022-12-01' = {
name: 'example'
properties: {
credentials: {
certificates: [ // Compliant
certificates: [
{
name: 'certificate1'
encodedPemCertificate: '[base64-encoded certificate]'
Expand Down

0 comments on commit 8e2f026

Please sign in to comment.