Azure Function App doesn't redirect HTTP to HTTPS misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_70
Category - Subcategory	Public Exposure - APIs
Provider	AZURE
Severity	MEDIUM
Framework	ARM, Bicep, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	82d945cb-49c0-4163-89ef-7ac3c194d4cb

Impact

By ensuring that function apps are only accessible over HTTPS, you can help to protect the data transmitted to and from your app from being accessed or modified by unauthorized parties. This can help to improve the security of your app and protect it from potential threats such as man-in-the-middle attacks or data breaches.

How to Fix

Resource: azurerm_app_service

• Arguments: https_only [source,go]

---

resource "azurerm_app_service" "example" { ...

• https_only = true }

---