rspec/rules/S6403/ask-yourself.adoc
github-actions[bot] 4b9ca66416
Create rule S6403[terraform] Creating GCP SQL instances without requiring TLS is security-sensitive (#712)
* Create rule S6403

* init s6403

* fixes after review

* Add message for omitted attributes. (#844)

* Add message for omitted attributes.

* Update rules/S6403/message.adoc

Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>

Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>

* Add new source tags for code examples

Co-authored-by: eric-therond-sonarsource <eric-therond-sonarsource@users.noreply.github.com>
Co-authored-by: eric-therond-sonarsource <eric.therond@sonarsource.com>
Co-authored-by: Nils Werner <64034005+nils-werner-sonarsource@users.noreply.github.com>
Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>
Co-authored-by: Nils Werner <nils.werner@sonarsource.com>
2022-02-22 11:01:40 +00:00

8 lines
299 B
Plaintext

== Ask Yourself Whether
Connections are not already automatically encrypted by GCP (eg: SQL Auth proxy) and
* Connections to the SQL instance are performed on untrusted networks.
* The data stored in the SQL instance is confidential.
There is a risk if you answered yes to any of those questions.