Azure Function App authentication is off misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_56
Category - Subcategory	Public Exposure - APIs
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	b363fa7f-b967-4f99-9194-8ff0730372f6

Impact

Azure App Service Authentication is a feature that can prevent anonymous HTTP requests from reaching the Function app, or authenticate those that have tokens before they reach the Function app.

How to Fix

Resource: azurerm_function_app

• Arguments: auth_settings.enabled [source,go]

---

resource "azurerm_function_app" "example" { ...

• auth_settings {
• enabled = true } }

---