Control: Ensure WEB app has 'Client Certificates (Incoming client certificates)' set to 'On'
Description
Client certificates allow for the app to request a certificate for incoming requests. Only clients that have a valid certificate will be able to reach the app.
Usage
Run the control in your terminal:
powerpipe control run terraform_azure_compliance.control.appservice_web_app_client_certificates_on
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_azure_compliance.control.appservice_web_app_client_certificates_on --share
SQL
This control uses a named query:
appservice_web_app_client_certificates_on