App service does not enable failed request tracing misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_66
Category - Subcategory	Public Exposure - APIs
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

By enabling failed request tracing for your app service, you can collect this information and use it to troubleshoot issues with your app and identify potential problems. This can help to ensure that your app is running smoothly and is able to handle any errors that might occur.

How to Fix

Resource: azurerm_app_service

• Arguments: logs.failed_request_tracing_enabled [source,go]

---

resource "azurerm_app_service" "example" { ...

• logs {

• failed_request_tracing_enabled = true } ... }

---