rspec/rules/S6378/terraform/rule.adoc

include::../description.adoc[]

include::../ask-yourself.adoc[]

include::../recommended.adoc[]

== Sensitive Code Example

For Typical identity blocks:

----
resource "azurerm_api_management" "example" { # Sensitive, the identity block is missing
  name           = "example"
  publisher_name = "company"     
}
----

For connections between Kusto Clusters and Azure Data Factory:

----
resource "azurerm_data_factory_linked_service_kusto" "example" {
  name                 = "example"
  use_managed_identity = false # Sensitive
}
----

== Compliant Solution

For Typical identity blocks:

----
resource "azurerm_api_management" "example" {
  name           = "example"
  publisher_name = "company" 

  identity {
    type = "SystemAssigned"
  }
}
----

For connections between Kusto Clusters and Azure Data Factory:

----
resource "azurerm_data_factory_linked_service_kusto" "example" {
  name                 = "example"
  use_managed_identity = true
}
----

include::../see.adoc[]
ifdef::env-github,rspecator-view[]

'''
== Implementation Specification
(visible only on this page)

include::../message.adoc[]

include::../highlight.adoc[]

endif::env-github,rspecator-view[]