Control: App Service apps should have Client Certificates (Incoming client certificates) enabled
Description
Client certificates allow for the app to request a certificate for incoming requests. Only clients that have a valid certificate will be able to reach the app.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.appservice_api_app_client_certificates_onSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.appservice_api_app_client_certificates_on --shareSQL
This control uses a named query:
appservice_api_app_client_certificates_on