> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Storage

<AccordionGroup>
  <Accordion title="storage-use-secure-tls-policy">
    Azure Storage currently supports three versions of the TLS protocol: 1.0, 1.1, and 1.2. Azure Storage uses TLS 1.2 on public HTTPS endpoints, but TLS 1.0 and TLS 1.1 are still supported for backward compatibility. This check will warn if the minimum TLS is not set to TLS1\_2.<br />**Likelihood**: MEDIUM<br />**Confidence**: MEDIUM<br />**CWE**: <br />- CWE-326: Inadequate Encryption Strength
    <br />**OWASP**: <br />- A03:2017 - Sensitive Data Exposure
    <br />- A02:2021 - Cryptographic Failures
  </Accordion>

  <Accordion title="storage-allow-microsoft-service-bypass">
    Some Microsoft services that interact with storage accounts operate from networks that can't be granted access through network rules. To help this type of service work as intended, allow the set of trusted Microsoft services to bypass the network rules<br />**Likelihood**: LOW<br />**Confidence**: LOW<br />**CWE**: <br />- CWE-284: Improper Access Control
    <br />**OWASP**: <br />- A05:2017 - Broken Access Control
    <br />- A01:2021 - Broken Access Control
  </Accordion>

  <Accordion title="storage-queue-services-logging">
    Storage Analytics logs detailed information about successful and failed requests to a storage service. This information can be used to monitor individual requests and to diagnose issues with a storage service. Requests are logged on a best-effort basis.<br />**Likelihood**: LOW<br />**Confidence**: LOW<br />**CWE**: <br />- CWE-778: Insufficient Logging
    <br />**OWASP**: <br />- A10:2017 - Insufficient Logging & Monitoring
    <br />- A09:2021 - Security Logging and Monitoring Failures
  </Accordion>

  <Accordion title="storage-default-action-deny">
    Detected a Storage that was not configured to deny action by default. Add `default_action = "Deny"` in your resource block.<br />**Likelihood**: LOW<br />**Confidence**: LOW<br />**CWE**: <br />- CWE-16: CWE CATEGORY: Configuration
    <br />**OWASP**: <br />- A06:2017 - Security Misconfiguration
    <br />- A05:2021 - Security Misconfiguration
  </Accordion>

  <Accordion title="storage-enforce-https">
    Detected a Storage that was not configured to deny action by default. Add `enable_https_traffic_only = true` in your resource block.<br />**Likelihood**: LOW<br />**Confidence**: MEDIUM<br />**CWE**: <br />- CWE-319: Cleartext Transmission of Sensitive Information
    <br />**OWASP**: <br />- A03:2017 - Sensitive Data Exposure
    <br />- A02:2021 - Cryptographic Failures
  </Accordion>
</AccordionGroup>