Azure App Service Web app does not use latest PHP version misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_81
Category - Subcategory	Compute - Unsanctioned Resource Or Type
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

Azure App Service web applications developed with the PHP should use the latest available version of PHP to ensure the latest security fixes are in use.

How to Fix

Resource: azurerm_app_service

• Arguments: php_version - (Optional) The version of PHP to use in this App Service.

Possible values are 5.5, 5.6, 7.0, 7.1, 7.2, 7.3 and 7.4. [source,go]

resource "azurerm_app_service" "example" { ...

• site_config {
• php_version = "7.4" } }

---