Function apps should use the latest 'Python version' when Python is part of the app
Periodically, newer versions are released for Python software either due to security flaws or to include additional functionality. Using the latest Python version for Function apps is recommended. This policy only applies to Linux apps.
Periodically, newer versions are released for Python software either due to security flaws or to include additional functionality. Using the latest Python version for Function apps is recommended in order to take advantage of security fixes, if any, and/or new functionalities of the latest version.
What this control checks
Checks the Python version setting of Function apps that include Python
Common pitfalls
Policy covers Linux apps only
This policy only applies to Linux apps.
A Python version meeting your needs is required
This policy requires you to specify a Python version that meets your requirements.
LinuxPythonLatestVersion defaults to 3.9, deprecated
LinuxPythonLatestVersion has the defaultValue "3.9" and is deprecated.
Audit evidence
Evidence that deployed resources meet this control: Azure Policy compliance results for the built-in policy definition "Function apps that use Python should use a specified 'Python version'" (7238174a-fd10-4ef0-817e-fc820a951d73); PowerPipe control azure_compliance.control.appservice_function_app_latest_python_version.
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
appservice_function_app_latest_python_version - Powerpipe Control:
azure_compliance.control.appservice_function_app_latest_python_version - Azure Policy Definition:
7238174a-fd10-4ef0-817e-fc820a951d73
Last reviewed: 2026-10-11