Query: App Service Environment should enable internal encryption

Description

Setting InternalEncryption to true encrypts the pagefile, worker disks, and internal network traffic between the front ends and workers in an App Service Environment.

Query

Tables used in this query:

terraform_resource

Controls using this query:

App Service Environment should enable internal encryption

SQL

select
  address as resource,
  case
    when (attributes_std -> 'cluster_setting') is null then 'alarm'
    when (attributes_std -> 'cluster_setting' ->> 'name') :: text = 'InternalEncryption'
    and (attributes_std -> 'cluster_setting' ->> 'value') :: text = 'true' then 'ok'
    else 'alarm'
  end status,
  split_part(address, '.', 2) || case
    when (attributes_std -> 'cluster_setting') is null then ' ''cluster_setting'' not defined'
    when (attributes_std -> 'cluster_setting' ->> 'name') :: text = 'InternalEncryption'
    and (attributes_std -> 'cluster_setting' ->> 'value') :: text = 'true' then ' internal encryption enabled'
    else ' internal encryption disabled'
  end || '.' reason,
  path || ':' || start_line
from
  terraform_resource
where
  type = 'azurerm_app_service_environment';