Control: Ensure that 'HTTP Version' is the latest, if used to run the Web app

Description

Periodically, newer versions are released for HTTP either due to security flaws or to include additional functionality. Using the latest HTTP version for web apps to take advantage of security fixes, if any, and/or new functionalities of the newer version. Currently, this policy only applies to Linux web apps.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.appservice_web_app_latest_http_version

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.appservice_web_app_latest_http_version --share

SQL

This control uses a named query:

select
  app.id as resource,
  case
    when not (configuration -> 'properties' ->> 'http20Enabled') :: boolean then 'alarm'
    else 'ok'
  end as status,
  case
    when not (configuration -> 'properties' ->> 'http20Enabled') :: boolean then name || ' HTTP version not latest.'
    else name || ' HTTP version is latest.'
  end as reason
  
  , app.resource_group as resource_group
  , sub.display_name as subscription
from
  azure_app_service_web_app as app,
  azure_subscription as sub
where
  sub.subscription_id = app.subscription_id;

Control: Ensure that 'HTTP Version' is the latest, if used to run the Web app

Description

Usage

SQL

Tags