Skip to main content

💼 9.2 Ensure Web App Redirects All HTTP traffic to HTTPS in Azure App Service - Level 1 (Automated)

  • Contextual name: 💼 9.2 Ensure Web App Redirects All HTTP traffic to HTTPS in Azure App Service - Level 1 (Automated)
  • ID: /frameworks/cis-azure-v2.0.0/09/02
  • Located in: 💼 9 AppService

Description​

Azure Web Apps allows sites to run under both HTTP and HTTPS by default. Web apps can be accessed by anyone using non-secure HTTP links by default. Non-secure HTTP requests can be restricted and all HTTP requests redirected to the secure HTTPS port. It is recommended to enforce HTTPS-only traffic.

Similar​

  • Internal
    • ID: dec-c-a882ca03

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags

Policies (1)​

PolicyLogic CountFlags
📝 Azure App Service HTTPS Only configuration is not enabled 🟢1🟢 x6

Internal Rules​

RulePoliciesFlags
✉️ dec-x-75db76ad1