Azure Compliance ControlsAzure Functions
Function apps should use the latest 'HTTP Version' when used to run the app
Periodically, newer versions are released for HTTP either due to security flaws or to include additional functionality. Function apps should use the latest 'HTTP Version' to take advantage of security fixes, if any, and/or new functionalities of the newer version.
What this control checks
Function apps must be configured to use the latest HTTP version when running the app
Framework mappings
The clauses this control is mapped to in each framework.
- SI-2 Flaw Remediation
- SI-2(6) Removal of Previous Versions of Software and Firmware
FedRAMP Moderate Baseline Rev 4
- SI-2 Flaw Remediation
- 3.14.1 Identify, report, and correct system flaws in a timely manner
- SI.L1-3.14.1 Identify, report, and correct system flaws in a timely manner
- SI-2 Flaw Remediation
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
appservice_function_app_latest_http_version - Checkov Check:
CKV_AZURE_67 - Powerpipe Control:
azure_compliance.control.appservice_function_app_latest_http_version - Azure Policy Definition:
e2c1c086-2d84-4019-bff3-c44ccd95113c
Last reviewed: 2026-10-11