Azure / Azure/azure-powershell

[Feature]: New-AzStorageAccount should default to TLS 1.2 as the MinimumTlsValue

Open
#27,133 4 comments 0 reactions 0 assignees View on GitHub
act-codegen-extensibility-squad customer-reported feature-request Storage
Dominant language
C#
Stars
4.8k
Forks
4.3k
Avg merge
2d 17h
Merged PRs (30d)
51

Description

### Description of the new feature

I see issue https://github.com/Azure/azure-powershell/issues/15228 has been closed a couple of years ago, but it would be good to revisit this. https://learn.microsoft.com/en-us/dotnet/framework/network-programming/tls notes that 1.0 and 1.1 have been deprecated, but the New-AzStorageAccount PowerShell command still defaults to using 1.0 as the MinimumTlsVersion.
Comments in the linked issue 15228 suggest that this is because the server sets that value as default, and if that's the case then this should be changed also.
Note that I am not asking for existing resources to be modified, but that it is inappropriate for default behaviour to be using deprecated versions of security protocols.

### Proposed implementation details (optional)

_No response_

Contributor guide

Open the contributing guide

Research direction

Start by tracing the New-AzStorageAccount cmdlet and the storage account creation request to find where MinimumTlsVersion defaults to 1.0. Check the related tests, if present, and verify that newly created accounts use TLS 1.2 while existing resources remain unchanged.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, csharp, powershell
Domain
cloud, security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.