Skip to content

feat(misconf): support for azurerm_network_interface_security_group_association #10213

@nikpivkin

Description

@nikpivkin

The network_security_group_id attribute of the azurerm_network_interface resource has been deprecated and subsequently removed in favor of the separate azurerm_network_interface_security_group_association resource, which is now used to explicitly associate a network interface with a security group.

Support for parsing the azurerm_network_interface_security_group_association resource should be added and used when determining the security groups associated with a network interface. At the same time, parsing of the network_security_group_id attribute should be preserved for backward compatibility.

This will resolve false positive findings for AZU-0068.

Discussed in #10203

Metadata

Metadata

Assignees

No one assigned

    Labels

    good first issueDenotes an issue ready for a new contributor, according to the "help wanted" guidelines.kind/featureCategorizes issue or PR as related to a new feature.scan/misconfigurationIssues relating to misconfiguration scanning

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions