Control: 4.10 Ensure that App Engine applications enforce HTTPS connections

Description

In order to maintain the highest level of security all connections to an application should be secure by default.

Insecure HTTP connections maybe subject to eavesdropping which can expose sensitive data.

Add a line to the app.yaml file controlling the application which enforces secure connections. For example

handlers:
- url: /.*
  **secure: always**
  redirect_http_response_code: 301
  script: auto

By default both HTTP and HTTP are supported

Run the control in your terminal:

powerpipe control run gcp_compliance.control.cis_v200_4_10

powerpipe login
powerpipe control run gcp_compliance.control.cis_v200_4_10 --share

This control uses a named query: