turbot/steampipe-mod-terraform-azure-compliance

Control: Function App should only be accessible over HTTPS

Description

Use of HTTPS ensures server/service authentication and protects data in transit from network layer eavesdropping attacks.

Usage

Run the control in your terminal:

powerpipe control run terraform_azure_compliance.control.appservice_function_app_only_https_accessible

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_azure_compliance.control.appservice_function_app_only_https_accessible --share

SQL

This control uses a named query:

select
address as resource,
case
when (attributes_std -> 'https_only')::boolean then 'ok'
else 'ok'
end status,
split_part(address, '.', 2) || case
when (attributes_std -> 'https_only')::boolean then ' https-only accessible enabled'
else ' https-only accessible disabled'
end || '.' reason
, path || ':' || start_line
from
terraform_resource
where
type = 'azurerm_function_app';

Tags