Back to all reviewers

Azure encryption property names

bridgecrewio/checkov
Based on 2 comments
Json

When configuring encryption settings for Azure resources in ARM templates, always use the correct property names as documented in the Azure API specifications. Specifically for Azure Compute disks, use `enableDoubleEncryption` instead of `doubleEncryptionEnabled` to configure double encryption. Using incorrect property names can result in security...

Security Json

Reviewer Prompt

When configuring encryption settings for Azure resources in ARM templates, always use the correct property names as documented in the Azure API specifications. Specifically for Azure Compute disks, use enableDoubleEncryption instead of doubleEncryptionEnabled to configure double encryption. Using incorrect property names can result in security configurations silently failing to be applied, potentially leaving resources vulnerable.

Example:

// INCORRECT
{
  "properties": {
    "doubleEncryptionEnabled": true  // Wrong property name
  }
}

// CORRECT
{
  "properties": {
    "enableDoubleEncryption": true  // Correct property name
  }
}
2
Comments Analyzed
Json
Primary Language
Security
Category

Source Discussions