Aqua CSPM

Detect Insecure Custom Origin

Quick Info

Plugin TitleDetect Insecure Custom Origin
CloudAZURE
CategoryCDN Profiles
DescriptionEnsures that HTTPS is enabled for CDN endpoints with a custom origin
More InfoAll Azure CDN endpoints should enable HTTPS to secure traffic to the backend custom origin.
AZURE Linkhttps://docs.microsoft.com/en-us/azure/cdn/cdn-create-endpoint-how-to
Recommended ActionEnable HTTPS and disable HTTP for each custom origin endpoint for each CDN profile.

Detailed Remediation Steps