Azure_AppService_5

Ensure that Register with Azure Active Directory is enabled on App Service

Description

Managed service identity in App Service makes the app more secure by eliminating secrets from the app, such as credentials in the connection strings. When registering with Azure Active Directory in the app service, the app will connect to other Azure services securely without the need of username and passwords.

Remediation

Perform the following in the Azure Console:

  1. Login to Azure Portal using https://portal.azure.com
  2. Go to App Services
  3. Click on each App
  4. Under Setting section, Click on Identity
  5. Set Status to On

Perform the following in Azure Command Line Interface 2.0:

To set Register with Azure Active Directory feature for an existing app, run the following command.

az webapp identity assign –resource-group <RESOURCE_GROUP_NAME> –name <APP_NAME>

References:

  1. https://docs.microsoft.com/en-gb/azure/app-service/app-service-web-tutorial-connect-msi

Service

AppService

Severity

Medium

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!