Skip to content

Commit

Permalink
feat: Add recommendation for Service Bus minimum TLS version (#437)
Browse files Browse the repository at this point in the history
Co-authored-by: Zach Trocinski <[email protected]>
  • Loading branch information
tksh164 and oZakari authored Oct 7, 2024
1 parent 6df5c34 commit 4f74227
Show file tree
Hide file tree
Showing 2 changed files with 31 additions and 0 deletions.
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
// Azure Resource Graph Query
// Provides a list of Service Bus Namespace resources that have the lower minimum TLS version.
resources
| where type =~ "Microsoft.ServiceBus/namespaces"
| where properties.minimumTlsVersion in ("1.0", "1.1")
| project
recommendationId = "f075a1bd-de9e-4819-9a1d-1ac41037a74f",
name,
id,
tags,
param1 = strcat("minimumTlsVersion: ", properties.minimumTlsVersion)
20 changes: 20 additions & 0 deletions azure-resources/ServiceBus/namespaces/recommendations.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -37,3 +37,23 @@
learnMoreLink:
- name: Service Bus auto-scaling
url: "https://learn.microsoft.com/azure/service-bus-messaging/automate-update-messaging-units"

- description: Configure the minimum TLS version for Service Bus namespaces to TLS v1.2 or higher
aprlGuid: f075a1bd-de9e-4819-9a1d-1ac41037a74f
recommendationTypeId: null
recommendationControl: Service Upgrade and Retirement
recommendationImpact: High
recommendationResourceType: Microsoft.ServiceBus/namespaces
recommendationMetadataState: Active
longDescription: |
As of 31 October 2024, TLS 1.0 and TLS 1.1 will no longer be supported on Azure including Service Bus to enhance security and provide best-in-class encryption for your data. Change the minimum TLS version for your Service Bus namespace to TLS v1.2 or higher.
potentialBenefits: Avoids service disruption
pgVerified: false
publishedToLearn: false
automationAvailable: true
tags: null
learnMoreLink:
- name: Azure support for TLS 1.0 and TLS 1.1 will end by 31 October 2024
url: "https://azure.microsoft.com/updates/azure-support-tls-will-end-by-31-october-2024-2/"
- name: Configure the minimum TLS version for a Service Bus namespace
url: "https://learn.microsoft.com/azure/service-bus-messaging/transport-layer-security-configure-minimum-version"

0 comments on commit 4f74227

Please sign in to comment.