Sign in Start Free Trial

Terraform Modules for AWS

AWS Compliance Frameworks

AWS Compliance Controls

Azure Compliance Frameworks

Azure Compliance Controls

App Service API apps should require FTPS only App Service API apps should require HTTPS for all access App Service API apps should use managed identity App Service apps should have 'Client Certificates (Incoming client certificates)' enabled App Service apps should have 'HTTP logs' enabled App Service apps should have 'Register with Azure Active Directory' enabled App Service apps should have App Service authentication configured App Service apps should have Client Certificates (Incoming client certificates) enabled App Service apps should have FTP deployments disabled App Service apps should have remote debugging disabled App Service apps should have resource logs enabled App Service apps should not allow CORS access from every resource App Service apps should not allow CORS access from every resource App Service apps should use a virtual network service endpoint App Service apps should use managed identity App Service apps should use the latest TLS version App Service environments should have internal encryption enabled App Service plans should not use free, shared, or basic SKUs App Service web app slots should require HTTPS for all access App Service web apps should have 'Client Certificates (Incoming client certificates)' set to 'On'App Service web apps should have Always On enabled App Service web apps should have failed request tracing enabled App Service web apps should have HTTP logs enabled App Service web apps should have more than one worker App Service web apps should have remote debugging disabled App Service web apps should require FTPS App Service web apps should require HTTPS for all access App Service web apps should use the latest 'HTTP Version' when used to run the app App Service web apps should use the latest 'Java version' when Java is part of the app App Service web apps should use the latest 'PHP version' when PHP is part of the app App Service web apps should use the latest 'Python version' when Python is part of the app App Service web apps should use the latest .NET Framework version App Service web apps should use the latest TLS version Web apps should have health check enabled

Google Cloud Compliance Frameworks

Google Cloud Compliance Controls

Azure Compliance ControlsAzure App Service

App Service web app slots should require HTTPS for all access

Use of HTTPS ensures server/service authentication and protects data in transit from network layer eavesdropping attacks.

What this control checks

App Service web app slots must be set to require HTTPS for all access

Related controls

Function apps should require FTPS only
Storage accounts should have 'Minimum TLS version' set to 'Version 1.2'
Application gateways should have Web Application Firewall (WAF) enabled
API Management services should have client certificates enabled

Tool mappings

Use these identifiers to cross-reference this control across tools, reports, and evidence.

Compliance.tf Control: appservice_web_app_slot_use_https
Checkov Check: CKV_AZURE_153
Powerpipe Control: azure_compliance.control.appservice_web_app_slot_use_https
Azure Policy Definitions: a18c77f2-3d6d-497a-9f61-849a7e8a3b79, ae1b9a8c-dfce-4605-bd91-69213b4a26fc

Last reviewed: 2026-10-11

View all Azure controls →

App Service plans should not use free, shared, or basic SKUs

Previous Page

App Service web apps should have 'Client Certificates (Incoming client certificates)' set to 'On'

Next Page

On this page

Implementation What this control checks Related controls Tool mappings

Ask AI about this

Ask Claude
Ask ChatGPT

Help improve this page

Suggest an edit
Share on LinkedIn

Copyright © 2024-2026 Betajob AS 🇺🇦Build: 20261018_075822_200685

Go to compliance.tf·Registry·Pricing·License Agreement··