Azure_AppService_1

Ensure App Service Authentication is set on Azure App Service

Description

Azure App Service Authentication is a feature that can prevent anonymous HTTP requests from reaching the API app, or authenticate those that have tokens before they reach the API app. If an anonymous request is received from a browser, App Service will redirect to a logon page. To handle the logon process, a choice from a set of identity providers can be made, or a custom authentication mechanism can be implemented.

Remediation

Perform the following in the Azure Console:

  1. Login to Azure Portal using https://portal.azure.com
  2. Go to App Services
  3. Click on each App
  4. Under Setting section, Click on Authentication / Authorization
  5. Set App Service Authentication to On
  6. Choose other parameters as per your requirement and Click on Save

Perform the following in Azure Command Line Interface 2.0:

To set App Service Authentication for an existing app, run the following command.

az webapp auth update –resource-group <RESOURCE_GROUP_NAME> –name <APP_NAME> –enabled false

References:

  1. https://docs.microsoft.com/en-us/azure/app-service/app-service-authentication-overview

Service

AppService

Severity

Medium

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!