Azure App Service Web app doesn't have a Managed Service Identity misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_71
Category - Subcategory	IAM - Authentication Policies
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	b6caba6b-cdb1-4db5-8045-9d0354a602de

Impact

Managed service identity in App Service makes the app more secure by eliminating secrets from the app, such as credentials in the connection strings. When registering with Azure Active Directory in the app service, the app will connect to other Azure services securely without the need of username and passwords.

How to Fix

Resource: azurerm_app_service

• Arguments: identity.type [source,go]

---

resource "azurerm_app_service" "example" { ...

• identity {
• type = "SystemAssigned" } }

---