Web App Accepting Traffic Other Than HTTPS
Allowing HTTP undermines transport encryption and exposes user data.
Impact
Recommended Actions
Follow the appropriate remediation steps below to resolve the issue.
Set ‘HTTPS Only’ to true in App Service TLS settings to force encrypted transport.
1
2
3
4
5
6
7
|
resource "azurerm_app_service" "good_example" {
name = "example-app-service"
location = azurerm_resource_group.example.location
resource_group_name = azurerm_resource_group.example.name
app_service_plan_id = azurerm_app_service_plan.example.id
https_only = true
}
|
Links