Azure Compliance ControlsAzure Functions
Function apps should have App Service authentication configured
Azure App Service Authentication is a feature that can prevent anonymous HTTP requests from reaching the Function app, or authenticate those that have tokens before they reach the Function app. Function apps should have authentication enabled.
What this control checks
Function apps must have App Service authentication enabled (siteAuthEnabled equals true).
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
appservice_function_app_authentication_on - Powerpipe Control:
azure_compliance.control.appservice_function_app_authentication_on - Azure Policy Definition:
c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8
Last reviewed: 2026-10-10