Web apps should have health check enabled
Health check increases your application's availability by rerouting requests away from unhealthy instances and replacing instances if they remain unhealthy. Checkov CKV_AZURE_213 asks that App Service configures health check.
Health check increases your application's availability by rerouting requests away from unhealthy instances and replacing instances if they remain unhealthy.
What this control checks
Web apps should have health check enabled; App Service must configure health check.
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.appservice_web_app_health_check_enabled.
Scans of the Terraform code that flag the same setting before deployment: Checkov check CKV_AZURE_213.
Related controls
- App Service apps should use managed identity
- App Service web apps should have HTTP logs enabled
- App Service apps should use the latest TLS version
- Function apps should use the latest 'Python version' when Python is part of the app
- Function apps should use the latest 'Java version' when Java is part of the app
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
appservice_web_app_health_check_enabled - Checkov Check:
CKV_AZURE_213 - Powerpipe Control:
azure_compliance.control.appservice_web_app_health_check_enabled
Last reviewed: 2026-10-11