azure_compliance

Azure Compliance

Client certificates allow for the app to request a certificate for incoming requests. Only clients with valid certificates will be able to reach the app.

appservice_function_app_client_certificates_on

nist_sp_800_171_rev_2_3_4_1

3.4.1 Establish and maintain baseline configurations and inventories of organizational systems (including hardware, software, firmware, and documentation) throughout the respective system development life cycles

nist_sp_800_171_rev_2_3_4_2

3.4.2 Establish and enforce security configuration settings for information technology products employed in organizational systems

all_controls_appservice

App Service

fedramp_high_cm_6

Configuration Settings (CM-6)

nist_sp_800_53_rev_5_cm_6

rbi_itf_nbfc_v2017_it_information_and_cyber_security_3_8

Digital Signatures-3.8

rbi_itf_nbfc_v2017_it_information_and_cyber_security_3_1_b

Segregation of Functions-3.1.b

Function apps should have 'Client Certificates (Incoming client certificates)' enabled

azure

azuread

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, HIPAA HITRUST, NIST, PCI DSS across all your Azure subscriptions using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-azure-compliance

Control: Function apps should have 'Client Certificates (Incoming client certificates)' enabled

Description

Usage

SQL

Tags