AzPolicyAdvertizer

last sync: 2025-May-22 17:43:25 UTC

Configure App Service apps to only be accessible over HTTPS

Azure BuiltIn Policy definition

Source Azure Portal
Display name Configure App Service apps to only be accessible over HTTPS
Id 0f98368e-36bc-4716-8ac2-8f8067203b63
Version 2.0.0
Details on versioning
Versioning Versions supported for Versioning: 1
2.0.0
Built-in Versioning [Preview]
Category App Service
Microsoft Learn
Description Use of HTTPS ensures server/service authentication and protects data in transit from network layer eavesdropping attacks.
Cloud environments AzureCloud = true
AzureUSGovernment = true
AzureChinaCloud = unknown
Available in AzUSGov The Policy is available in AzureUSGovernment cloud. Version: '2.*.*'
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Default
Modify
Allowed
Modify, Disabled
RBAC role(s)
Role Name Role Id
Website Contributor de139f84-1756-47ae-9be6-808fbbe84772
Rule aliases IF (1)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Web/sites/httpsOnly Microsoft.Web sites properties.httpsOnly True True
THEN-Operations (1)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Web/sites/httpsOnly Microsoft.Web sites properties.httpsOnly True True
Rule resource types IF (1)
Compliance Not a Compliance control
Initiatives usage
Rows: 1-2 / 2
Records:
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more

TableFilter v0.7.3

https://www.tablefilter.com/
©2015-2025 Max Guglielmi
?
Page of 1
Initiative DisplayName Initiative Id Initiative Category State Type polSet in AzUSGov
[Preview]: Control the use of App Service in a Virtual Enclave 528d78c5-246c-4f26-ade6-d30798705411 VirtualEnclaves Preview BuiltIn true
Enforce recommended guardrails for App Service Enforce-Guardrails-AppServices App Service GA ALZ
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-10-07 16:34:28 change Major (1.0.0 > 2.0.0)
2022-08-26 16:33:38 add 0f98368e-36bc-4716-8ac2-8f8067203b63
JSON compare
compare mode: version left: version right:
1.0.0 → 2.0.0 RENAMED
@@ -3,9 +3,9 @@
3
  "policyType": "BuiltIn",
4
  "mode": "Indexed",
5
  "description": "Use of HTTPS ensures server/service authentication and protects data in transit from network layer eavesdropping attacks.",
6
  "metadata": {
7
- "version": "1.0.0",
8
  "category": "App Service"
9
  },
10
  "parameters": {
11
  "effect": {
@@ -28,24 +28,20 @@
28
  "field": "kind",
29
  "notContains": "functionapp"
30
  },
31
  {
 
 
 
 
32
- "allOf": [
33
  {
 
34
- "field": "type",
35
- "equals": "Microsoft.Web/sites"
36
  },
37
  {
38
- "anyOf": [
39
- {
40
- "field": "Microsoft.Web/sites/httpsOnly",
41
- "exists": "false"
42
- },
43
- {
44
- "field": "Microsoft.Web/sites/httpsOnly",
45
- "equals": "false"
46
- }
47
- ]
48
  }
49
  ]
50
  }
51
  ]
 
3
  "policyType": "BuiltIn",
4
  "mode": "Indexed",
5
  "description": "Use of HTTPS ensures server/service authentication and protects data in transit from network layer eavesdropping attacks.",
6
  "metadata": {
7
+ "version": "2.0.0",
8
  "category": "App Service"
9
  },
10
  "parameters": {
11
  "effect": {
 
28
  "field": "kind",
29
  "notContains": "functionapp"
30
  },
31
  {
32
+ "field": "type",
33
+ "equals": "Microsoft.Web/sites"
34
+ },
35
+ {
36
+ "anyOf": [
37
  {
38
+ "field": "Microsoft.Web/sites/httpsOnly",
39
+ "exists": "false"
 
40
  },
41
  {
 
 
42
+ "field": "Microsoft.Web/sites/httpsOnly",
 
 
 
 
43
+ "equals": "false"
 
 
44
  }
45
  ]
46
  }
47
  ]
JSON
api-version=2021-06-01
EPAC 
{7 items}