Control: Web apps should use the latest 'Net Framework' version

Description

Periodically, newer versions are released for Net Framework software either due to security flaws or to include additional functionality. Using the latest Net Framework for web apps is recommended in order to take advantage of security fixes, if any, and/or new functionalities of the latest version.

Usage

Run the control in your terminal:

powerpipe control run terraform_azure_compliance.control.appservice_web_app_latest_dotnet_framework_version

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_azure_compliance.control.appservice_web_app_latest_dotnet_framework_version --share

SQL

This control uses a named query:

select
  address as resource,
  case
    when (attributes_std -> 'site_config' ->> 'dotnet_framework_version') is null then 'skip'
    when (attributes_std -> 'site_config' ->> 'dotnet_framework_version') = 'v6.0' then 'ok'
    else 'alarm'
  end status,
  split_part(address, '.', 2) || case
    when (attributes_std -> 'site_config' ->> 'dotnet_framework_version') is null then ' not using dotnet framework'
    when (attributes_std -> 'site_config' ->> 'dotnet_framework_version') = 'v6.0' then ' using latest dotnet framework version'
    else ' not using latest dotnet framework version'
  end || '.' reason
  
  , path || ':' || start_line
from
  terraform_resource
where
  type = 'azurerm_app_service';

Control: Web apps should use the latest 'Net Framework' version

Description

Usage

SQL

Tags