Azure / Azure/azure-powershell
[Feature]: New-AzStorageAccount should default to TLS 1.2 as the MinimumTlsValue
- Dominant language
- C#
- Stars
- 4.8k
- Forks
- 4.3k
- Avg merge
- 2d 17h
- Merged PRs (30d)
- 51
Description
### Description of the new feature
I see issue https://github.com/Azure/azure-powershell/issues/15228 has been closed a couple of years ago, but it would be good to revisit this. https://learn.microsoft.com/en-us/dotnet/framework/network-programming/tls notes that 1.0 and 1.1 have been deprecated, but the New-AzStorageAccount PowerShell command still defaults to using 1.0 as the MinimumTlsVersion.
Comments in the linked issue 15228 suggest that this is because the server sets that value as default, and if that's the case then this should be changed also.
Note that I am not asking for existing resources to be modified, but that it is inappropriate for default behaviour to be using deprecated versions of security protocols.
### Proposed implementation details (optional)
_No response_
Contributor guide
Research direction
Start by tracing the New-AzStorageAccount cmdlet and the storage account creation request to find where MinimumTlsVersion defaults to 1.0. Check the related tests, if present, and verify that newly created accounts use TLS 1.2 while existing resources remain unchanged.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, csharp, powershell
- Domain
- cloud, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100