azure_compliance

Azure Compliance

Client certificates allow for the app to request a certificate for incoming requests. Only clients that have a valid certificate will be able to reach the app.

appservice_web_app_incoming_client_cert_on

nist_sp_800_171_rev_2_3_4_1

3.4.1 Establish and maintain baseline configurations and inventories of organizational systems (including hardware, software, firmware, and documentation) throughout the respective system development life cycles

nist_sp_800_171_rev_2_3_4_2

3.4.2 Establish and enforce security configuration settings for information technology products employed in organizational systems

all_controls_appservice

App Service

Ensure the web app has 'Client Certificates (Incoming client certificates)' set to 'On'

azure

azuread

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, HIPAA HITRUST, NIST, PCI DSS across all your Azure subscriptions using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-azure-compliance

Control: Ensure the web app has 'Client Certificates (Incoming client certificates)' set to 'On'

Description

Usage

SQL

Tags