Control: App Service apps should have 'Client Certificates (Incoming client certificates)' enabled
Description
Client certificates allow for the app to request a certificate for incoming requests. Only clients that have a valid certificate will be able to reach the app.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.appservice_web_app_client_certificates_onSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.appservice_web_app_client_certificates_on --shareSQL
This control uses a named query:
appservice_web_app_client_certificates_on