Fix: Enforce minimum TLS 1.2 for Azure Storage Account

[Tanmaykaturi]

⏺ Summary

Adds an explicit min_tls_version = "TLS1_2" setting to the azurerm_storage_account.storage_accounts resource in _examples/971/modules/azure/storage-account/module.tf.

Problem

The azurerm_storage_account resource did not specify a minimum TLS version, allowing the storage account to accept connections over TLS 1.0 or TLS 1.1. Both protocols are deprecated and are known to be vulnerable to attacks such as POODLE and
BEAST. This was flagged by tfsec as storage-use-secure-tls-policy.

Solution

Explicitly set min_tls_version = "TLS1_2" on the resource to enforce TLS 1.2 as the minimum accepted protocol version.

resource "azurerm_storage_account" "storage_accounts" {

• name = var.name

• name = var.name
• min_tls_version = "TLS1_2"
  }

Impact

• Enforces TLS 1.2 as the minimum protocol version for all client connections to this storage account.
• Brings the module into alignment with the Azure Security Benchmark and Microsoft's recommended best practices.
• No functional impact is expected for clients already connecting over TLS 1.2 or later. Clients still relying on TLS 1.0/1.1 will need to upgrade their connection configuration.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 2 committers have signed the CLA.

✅ Tanmaykaturi
❌ appuser

---

appuser seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}