Ensure public access is disabled for Azure IoT Hub
HIGH
Description
Allowing unrestricted, public access to cloud services could open an application up to external attack. Disallowing this access is typically considered best practice.
Remediation
In Azure Console -
Go to Azure IoT Hub.
Choose an IoT Hub to edit.
In the Security settings, Choose Networking.
Click on the click on public access and choose disabled.
Click save.
In Terraform -
In the azurerm_iothub resource, set public_network_access_enabled to false.