💼 9 AppService

Description

This section covers security recommendations for Azure AppService.

Section	Sub Sections	Internal Rules	Policies	Flags
💼 9.1 Ensure 'HTTPS Only' is set to 'On' (Automated)			1
💼 9.2 Ensure App Service Authentication is set up for apps in Azure App Service (Automated)			1
💼 9.3 Ensure 'FTP State' is set to 'FTPS Only' or 'Disabled' (Automated)			1
💼 9.4 Ensure Web App is using the latest version of TLS encryption (Automated)			1
💼 9.5 Ensure that Register with Entra ID is enabled on App Service (Automated)			1
💼 9.6 Ensure that 'Basic Authentication' is 'Disabled' (Manual)			1
💼 9.7 Ensure that 'PHP version' is currently supported (if in use) (Manual)			1
💼 9.8 Ensure that 'Python version' is currently supported (if in use) (Manual)			1
💼 9.9 Ensure that 'Java version' is currently supported (if in use) (Manual)			1
💼 9.10 Ensure that 'HTTP20enabled' is set to 'true' (if in use) (Automated)			1
💼 9.11 Ensure Azure Key Vaults are Used to Store Secrets (Manual)			1
💼 9.12 Ensure that 'Remote debugging' is set to 'Off' (Automated)			1