Web Application should only be accessible over HTTPS

Azure Landing Zones (ALZ) Policy definition

Alias

Namespace

ResourceType

Path

PathIsDefault

DefaultPath

Modifiable

Microsoft.Web/sites/httpsOnly

Microsoft.Web

sites

properties.httpsOnly

True

Rows: 1-3 / 3

Records:

Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more

TableFilter v0.7.3

https://www.tablefilter.com/
©2015-2025 Max Guglielmi

Page of 1

Initiative DisplayName

Initiative Id

Initiative Category

State

[Deprecated]: Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit

Enforce-EncryptTransit_20240509

Encryption

Deprecated

[Deprecated]: Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit

Enforce-EncryptTransit

Encryption

Deprecated

Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit

Enforce-EncryptTransit_20241211

Encryption

{

policyType: "Custom",
mode: "Indexed",
displayName: "Web Application should only be accessible over HTTPS",
description: "Use of HTTPS ensures server/service authentication and protects data in transit from network layer eavesdropping attacks.",
metadata: {4 items
- version: "1.0.0",
- category: "App Service",
- source: "https://github.com/Azure/Enterprise-Scale/",
- alzCloudEnvironments: [3 items
  - "AzureCloud",
  - "AzureChinaCloud",
  - "AzureUSGovernment"
  ]
},
parameters: {1 item
- effect: {4 items
  - type: "String",
  - defaultValue: "Deny",
  - allowedValues: [3 items
    - "Audit",
    - "Disabled",
    - "Deny"
    ],
  - metadata: {2 items
    - displayName: "Effect",
    - description: "Enable or disable the execution of the policy"
    }
  }
},
policyRule: {2 items
- if: {1 item
  - allOf: [3 items
    - {2 items
      - field: "type",
      - equals: "Microsoft.Web/sites"
      },
    - {2 items
      - field: "kind",
      - like: "app*"
      },
    - {2 items
      - field: "Microsoft.Web/sites/httpsOnly",
      - equals: "false"
      }
    ]
  },
- then: {1 item
  - effect: "[parameters('effect')]"
  }
}

}