explicitly check TLS types
@@ -18,10 +18,9 @@ class StorageAccountMinimumTlsVersion(BaseResourceCheck):
super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)
def scan_resource_conf(self, conf):
- if 'min_tls_version' not in conf or \
- conf['min_tls_version'][0] == 'TLS1_0' or conf['min_tls_version'][0] == 'TLS1_1':
- return CheckResult.FAILED
+ if 'min_tls_version' in conf and conf['min_tls_version'][0] in ['TLS1_2', 'TLS1_3']:
return CheckResult.PASSED
+ return CheckResult.FAILED
def get_evaluated_keys(self) -> List[str]:
return ['min_tls_version']
