Azure / Azure/template-analyzer
[Built-in Rule] Service Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign
- Dominant language
- C#
- Stars
- 143
- Forks
- 47
- PR merge metrics
- No merged PRs in 30d
Description
Azure policy: https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Service%20Fabric/ServiceFabric_AuditClusterProtectionLevel_Audit.json
``` javascript
{
"name": "ServiceFabric_ClusterProtectionLevel_EncryptAndSign",
"description": "Service Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign",
"recommendation": "Set the protection level to ensure that all node-to-node messages are encrypted and digitally signed",
"helpUri": "https://github.com/Azure/template-analyzer/docs/built-in-bpa-rules.md/#service-fabric-clusters-should-have-the-clusterprotectionlevel-property-set-to-encryptandsign",
"evaluation": {
"resourceType": "Microsoft.ServiceFabric/clusters",
"allOf": [
{
"path": "properties.fabricSettings[*].name",
"equals": "Security"
},
{
"path": "properties.fabricSettings[*].parameters[*].name",
"equals": "ClusterProtectionLevel"
},
{
"path": "properties.fabricSettings[*].parameters[*].value",
"equals": "EncryptAndSign"
}
]
}
}
```
Contributor guide
Assessment
This issue has not been assessed yet.