MariaDB servers should have 'Enforce SSL connection' set to 'ENABLED'
This control checks whether MariaDB servers SSL enforcement is enabled. This control is non-compliant if SSL enforcement is disabled. The Checkov check is named "Ensure 'Enforce SSL connection' is set to 'ENABLED' for MariaDB servers".
SSL connections should be enforced were available to ensure secure transfer and reduce the risk of compromising data in flight.
What this control checks
Fails any server where SSL enforcement is disabled
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.mariadb_server_ssl_enabled.
Scans of the Terraform code that flag the same setting before deployment: Checkov check CKV_AZURE_47; Trivy check AZU-0020.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
mariadb_server_ssl_enabled - Checkov Check:
CKV_AZURE_47 - Powerpipe Control:
azure_compliance.control.mariadb_server_ssl_enabled - Trivy Check:
AZU-0020
Last reviewed: 2026-10-13