Skip to main content

💼 9.2 Ensure Web App Redirects All HTTP traffic to HTTPS in Azure App Service - Level 1 (Automated)

  • Contextual name: 💼 9.2 Ensure Web App Redirects All HTTP traffic to HTTPS in Azure App Service - Level 1 (Automated)
  • ID: /frameworks/cis-azure-v1.4.0/09/02
  • Located in: 💼 9 AppService

Description

Azure Web Apps allows sites to run under both HTTP and HTTPS by default. Web apps can be accessed by anyone using non-secure HTTP links by default. Non-secure HTTP requests can be restricted and all HTTP requests redirected to the secure HTTPS port. It is recommended to enforce HTTPS-only traffic.

Similar

  • Internal
    • ID: dec-c-6c076824

Sub Sections

SectionSub SectionsInternal RulesPoliciesFlags

Policies (1)

PolicyLogic CountFlags
📝 Azure App Service HTTPS Only configuration is not enabled 🟢1🟢 x6

Internal Rules

RulePoliciesFlags
✉️ dec-x-75db76ad1