Azure Compliance ControlsAzure App Service
Web apps should have health check enabled
Health check increases your application's availability by rerouting requests away from unhealthy instances and replacing instances if they remain unhealthy. Checkov CKV_AZURE_213 asks that App Service configures health check.
What this control checks
Web apps should have health check enabled; App Service must configure health check.
Related controls
- App Service apps should use managed identity
- App Service web apps should have HTTP logs enabled
- App Service apps should use the latest TLS version
- Function apps should use the latest 'Python version' when Python is part of the app
- Function apps should use the latest 'Java version' when Java is part of the app
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
appservice_web_app_health_check_enabled - Checkov Check:
CKV_AZURE_213 - Powerpipe Control:
azure_compliance.control.appservice_web_app_health_check_enabled
Last reviewed: 2026-10-11