Configure Logic apps to use the latest TLS version

Azure Landing Zones (ALZ) Policy definition

Alias

Namespace

ResourceType

Path

PathIsDefault

DefaultPath

Modifiable

Microsoft.Web/sites/config/minTlsVersion

Microsoft.Web

sites/config

properties.minTlsVersion

True

False

Rows: 1-2 / 2

Records:

Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more

TableFilter v0.7.3

https://www.tablefilter.com/
©2015-2025 Max Guglielmi

Page of 1

Initiative DisplayName

Initiative Id

Initiative Category

State

[Deprecated]: Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit

Enforce-EncryptTransit_20240509

Encryption

Deprecated

Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit

Enforce-EncryptTransit_20241211

Encryption

Date/Time (UTC ymd) (i)

Change type

Change detail

2024-06-03 17:39:43

add

Deploy-LogicApp-TLS

{

policyType: "Custom",
mode: "Indexed",
displayName: "Configure Logic apps to use the latest TLS version",
description: "Periodically, newer versions are released for TLS either due to security flaws, include additional functionality, and enhance speed. Upgrade to the latest TLS version for Function apps to take advantage of security fixes, if any, and/or new functionalities of the latest version.",
metadata: {4 items
- version: "1.0.0",
- category: "Logic Apps",
- source: "https://github.com/Azure/Enterprise-Scale/",
- alzCloudEnvironments: [3 items
  - "AzureCloud",
  - "AzureChinaCloud",
  - "AzureUSGovernment"
  ]
},
parameters: {1 item
- effect: {4 items
  - type: "String",
  - allowedValues: [2 items
    - "DeployIfNotExists",
    - "Disabled"
    ],
  - defaultValue: "DeployIfNotExists",
  - metadata: {2 items
    - displayName: "Effect",
    - description: "Enable or disable the execution of the policy"
    }
  }
},
policyRule: {2 items
- if: {1 item
  - allOf: [2 items
    - {2 items
      - field: "type",
      - equals: "Microsoft.Web/sites"
      },
    - {2 items
      - field: "kind",
      - contains: "workflowapp"
      }
    ]
  },
- then: {2 items
  - effect: "[parameters('effect')]",
  - details: {5 items
    - type: "Microsoft.Web/sites/config",
    - name: "web",
    - existenceCondition: {2 items
      - field: "Microsoft.Web/sites/config/minTlsVersion",
      - equals: "1.2"
      },
    - roleDefinitionIds: [1 item
      - "/providers/microsoft.authorization/roleDefinitions/de139f84-1756-47ae-9be6-808fbbe84772" Website Contributor
      ],
    - deployment: {1 item
      - properties: {3 items
        mode: "incremental",
        parameters: {1 item
        siteName: {1 item
        value: "[field('name')]"
        }
        },
        template: {6 items
        $schema: "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
        contentVersion: "1.0.0.0",
        parameters: {1 item
        siteName: {1 item
        type: "string"
        }
        },
        variables: {},
        resources: [1 item
        {4 items
        type: "Microsoft.Web/sites/config",
        apiVersion: "2021-02-01",
        name: 🔍"[ concat( parameters('siteName'), '/web' ) ]",
        properties: {1 item
        minTlsVersion: "1.2"
        }
        }
        ],
        outputs: {}
        }
        }
      }
    }
  }
}

}