| Name | [Deprecated]: API apps should have 'Client Certificates (Incoming client certificates)' enabled Azure Portal |
||||||||||
| Id | 0c192fe8-9cbb-4516-85b3-0ade8bd03886 | ||||||||||
| Version | 1.0.0-deprecated details on versioning |
||||||||||
| Category | App Service Microsoft docs |
||||||||||
| Description | Client certificates allow for the app to request a certificate for incoming requests. Only clients that have a valid certificate will be able to reach the app. We recommend all customers who are still using API Apps to implement the built-in policy called 'App Service apps should have 'Client Certificates (Incoming client certificates)' enabled', which is scoped to include API apps in addition to Web Apps. | ||||||||||
| Mode | Indexed | ||||||||||
| Type | BuiltIn | ||||||||||
| Preview | FALSE | ||||||||||
| Deprecated | True | ||||||||||
| Effect | Default Audit Allowed Audit, Disabled |
||||||||||
| RBAC Role(s) |
none | ||||||||||
| Rule Aliases |
IF (1)
|
||||||||||
| Rule ResourceTypes |
IF (1) Microsoft.Web/sites |
||||||||||
| Compliance | Not a Compliance control | ||||||||||
| History |
|
||||||||||
| Initiatives usage |
none | ||||||||||
| JSON |
|