Loading controls...
Control: 4.3.2 Ensure 'Enforce SSL connection' is set to 'ENABLED' for MySQL Database Server
Description
It is recommended to enable SSL connection on MYSQL Servers. SSL connectivity helps to provide a new layer of security, by connecting database server to client applications using Secure Sockets Layer (SSL). Enforcing SSL connections between database server and client applications helps protect against attacks by encrypting the data stream between the server and application.
Remediation
From Console
- Login to Azure console and navigate to PostgreSQL Servers.
- For each database, go to
Settingssection from left pane. - Click on
Connection securityand go toSSL settings. - For
Enforce SSL connection, click on ENABLED.
From Command Line
Enable enforce ssl connection for PostgreSQL Database
az mysql server show --resource-group myresourcegroup --name <resourceGroupName> --query sslEnforcementUsage
Run the control in your terminal:
powerpipe control run azure_compliance.control.cis_v130_4_3_2Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.cis_v130_4_3_2 --shareSQL
This control uses a named query:
mysql_ssl_enabled