Name | [Deprecated]: API apps should have 'Client Certificates (Incoming client certificates)' enabled Azure Portal |
||||||||||
Id | 0c192fe8-9cbb-4516-85b3-0ade8bd03886 | ||||||||||
Version | 1.0.0-deprecated details on versioning |
||||||||||
Category | App Service Microsoft docs |
||||||||||
Description | Client certificates allow for the app to request a certificate for incoming requests. Only clients that have a valid certificate will be able to reach the app. We recommend all customers who are still using API Apps to implement the built-in policy called 'App Service apps should have 'Client Certificates (Incoming client certificates)' enabled', which is scoped to include API apps in addition to Web Apps. | ||||||||||
Mode | Indexed | ||||||||||
Type | BuiltIn | ||||||||||
Preview | FALSE | ||||||||||
Deprecated | True | ||||||||||
Effect | Default Audit Allowed Audit, Disabled |
||||||||||
RBAC Role(s) |
none | ||||||||||
Rule Aliases |
IF (1)
|
||||||||||
Rule ResourceTypes |
IF (1) Microsoft.Web/sites |
||||||||||
Compliance | Not a Compliance control | ||||||||||
History |
|
||||||||||
Initiatives usage |
none | ||||||||||
JSON |
|