Azure Compliance ControlsAzure Functions
Function apps should have 'Client Certificates (Incoming client certificates)' enabled
Function apps should have 'Client Certificates (Incoming client certificates)' enabled. Client certificates allow for the app to request a certificate for incoming requests. Only clients with valid certificates will be able to reach the app.
What this control checks
Checks the incoming client certificate setting on each Function app
Framework mappings
The clauses this control is mapped to in each framework.
- Configuration Settings (CM-6)
- 3.4.1 Establish and maintain baseline configurations and inventories of organizational systems (including hardware, software, firmware, and documentation) throughout the respective system development life cycles
- 3.4.2 Establish and enforce security configuration settings for information technology products employed in organizational systems
- 3.1.b Segregation of Functions
- 3.8 Digital Signatures
- CM-6 Configuration Settings
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
appservice_function_app_client_certificates_on - Powerpipe Control:
azure_compliance.control.appservice_function_app_client_certificates_on
Last reviewed: 2026-10-10