Query: Service Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign

Description

Service Fabric provides three levels of protection (None, Sign and EncryptAndSign) for node-to-node communication using a primary cluster certificate. Set the protection level to ensure that all node-to-node messages are encrypted and digitally signed.

Query

Tables used in this query:

• azure_service_fabric_cluster
• azure_subscription

Controls using this query:

• Service Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign

SQL