AzPolicyAdvertizer

last sync: 2025-Jul-25 17:39:48 UTC

[Deprecated]: Ensure that 'PHP version' is the latest, if used as a part of the API app

Azure BuiltIn Policy definition

Source

Azure Portal

Display name

[Deprecated]: Ensure that 'PHP version' is the latest, if used as a part of the API app

1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba

Version

2.1.0-deprecated
Details on versioning

Versioning

Versions supported for Versioning: 1
2.1.0 (2.1.0-deprecated)
Built-in Versioning [Preview]

Category

App Service
Microsoft Learn

Description

Periodically, newer versions are released for PHP software either due to security flaws or to include additional functionality. Using the latest PHP version for API apps is recommended in order to take advantage of security fixes, if any, and/or new functionalities of the latest version. We recommend all customers who are still using API Apps to implement the built-in policy called 'App Service apps that use PHP should use the latest 'PHP version'', which is scoped to include API apps.

Cloud environments

AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown

Available in AzUSGov

Unknown, no evidence if Policy definition is/not available in AzureUSGovernment

Assessment(s)

Assessments count: 1
Assessment Id: 6b86d069-b3c3-b4d7-47c7-e73ddf786a63
DisplayName: PHP should be updated to the latest version for API apps
Description: It's important to regularly update the PHP software used in API apps to the latest version.
Newer versions often include security fixes and additional functionalities.
If not updated, the API apps may be exposed to security vulnerabilities present in older versions, potentially leading to breaches.
Additionally, staying updated allows the apps to benefit from the new features and improvements introduced in the latest versions.

Remediation description: To set the PHP version for your API app, follow the instructions to show and set the version using the Azure CLI outlined in this document: https://aka.ms/configure-php
Categories: AppServices
Severity: Medium
preview: True

Mode

Indexed

Type

BuiltIn

Preview

False

Deprecated

True

Effect

Default
AuditIfNotExists
Allowed
AuditIfNotExists, Disabled

RBAC role(s)

none

Rule aliases

THEN-ExistenceCondition (1)

Alias	Namespace	ResourceType	Path	PathIsDefault	DefaultPath	Modifiable
Microsoft.Web/sites/config/web.linuxFxVersion	Microsoft.Web	sites/config	properties.linuxFxVersion	True		False

Rule resource types

IF (1)

Microsoft.Web/sites

Compliance

The following 3 compliance controls are associated with this Policy definition '[Deprecated]: Ensure that 'PHP version' is the latest, if used as a part of the API app' (1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba)

Rows: 1-3 / 3
Columns:
Select all:
Control Domain
Control
Name
MetadataId
Category
Title
Owner
Requirements
Description
Info
Policy#
Close
Columns▼Records:
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, **[empty]**, **[nonempty]**, **rgx:**
Learn more
TableFilter v0.7.3
https://www.tablefilter.com/
©2015-2025 Max Guglielmi
Close
?
Page of 1
Control Domain	Control	Name	MetadataId	Category	Title	Owner	Requirements	Description	Policy#

K_ISMS_P_2018	2.10.1	K_ISMS_P_2018_2.10.1	K ISMS P 2018 2.10.1	2.10	Establish Procedures for Managing the Security of System Operations	Shared	n/a	Establish and implement operating procedures for managing the security of system operations such as designating system administrators, updating policies, changing rulesets, monitoring events, managing policy implementations or exceptions.	408
K_ISMS_P_2018	2.10.2	K_ISMS_P_2018_2.10.2	K ISMS P 2018 2.10.2	2.10	Establish Protective Measures for Administrator Privileges and Security Configurations	Shared	n/a	Establish and implement protective measures with regard to administrator privileges and security configurations to ensure that important information and personal information are not exposed as a result of unauthorized access by service type or misconfigurations.	385
K_ISMS_P_2018	2.10.8	K_ISMS_P_2018_2.10.8	K ISMS P 2018 2.10.8	2.10	Apply the Latest Patches to Software and Hardware	Shared	n/a	Apply the latest patches to software and hardware to prevent vulnerabilities in operating systems and security systems. If the latest patch cannot be applied, supplemental protective measures must be implemented such as exception approval.	10

Initiatives usage

Rows: 1-1 / 1
Records:
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, **[empty]**, **[nonempty]**, **rgx:**
Learn more
TableFilter v0.7.3
https://www.tablefilter.com/
©2015-2025 Max Guglielmi
Close
?
Page of 1
Initiative DisplayName	Initiative Id	Initiative Category	State	Type	polSet in AzUSGov

K ISMS P 2018	e0782c37-30da-4a78-9f92-50bfe7aa2553	Regulatory Compliance	GA	BuiltIn	unknown

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2022-07-01 16:32:34	change	Version remains equal, new suffix: deprecated (2.1.0 > 2.1.0-deprecated)
2021-05-04 14:34:06	change	Minor (2.0.0 > 2.1.0)
2020-10-20 13:29:33	change	Major (1.0.0 > 2.0.0)
2019-11-12 19:11:12	add	1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba

JSON compare

compare mode: version left: version right:

2.1.0 → 2.1.0-deprecated RENAMED Viewed

@@ -1,12 +1,13 @@
 {
-    "displayName": "Ensure that 'PHP version' is the latest, if used as a part of the API app",
     "policyType": "BuiltIn",
     "mode": "Indexed",
     "description": "Periodically, newer versions are released for PHP software either due to security flaws or to include additional functionality. Using the latest PHP version for API apps is recommended in order to take advantage of security fixes, if any, and/or new functionalities of the latest version. Currently, this policy only applies to Linux web apps.",
     "metadata": {
-        "version": "2.1.0",
-        "category": "App Service"
     },
     "parameters": {
         "effect": {
             "type": "String",

 {
+    "displayName": "[Deprecated]: Ensure that 'PHP version' is the latest, if used as a part of the API app",
     "policyType": "BuiltIn",
     "mode": "Indexed",
     "description": "Periodically, newer versions are released for PHP software either due to security flaws or to include additional functionality. Using the latest PHP version for API apps is recommended in order to take advantage of security fixes, if any, and/or new functionalities of the latest version. Currently, this policy only applies to Linux web apps.",
     "metadata": {
+        "version": "2.1.0-deprecated",
+        "category": "App Service",
+        "deprecated": true
     },
     "parameters": {
         "effect": {
             "type": "String",

JSON

api-version=2021-06-01
EPAC

{7 itemsdisplayName: "[Deprecated]: Ensure that 'PHP version' is the latest, if used as a part of the API app",
policyType: "BuiltIn",
mode: "Indexed",
description: "Periodically, newer versions are released for PHP software either due to security flaws or to include additional functionality. Using the latest PHP version for API apps is recommended in order to take advantage of security fixes, if any, and/or new functionalities of the latest version. We recommend all customers who are still using API Apps to implement the built-in policy called 'App Service apps that use PHP should use the latest 'PHP version'', which is scoped to include API apps.",
metadata: {3 itemsversion: "2.1.0-deprecated",
category: "App Service",
deprecated: true
},
parameters: {2 itemseffect: {4 itemstype: "String",
metadata: {2 itemsdisplayName: "Effect",
description: "Enable or disable the execution of the policy"
},
allowedValues: [2 items"AuditIfNotExists",
"Disabled"
],
defaultValue: "AuditIfNotExists"
},
PHPLatestVersion: {3 itemstype: "String",
metadata: {2 itemsdisplayName: "Latest PHP version",
description: "Latest supported PHP version for App Services"
},
defaultValue: "7.4"
}
},
policyRule: {2 itemsif: {1 itemallOf: [3 items{2 itemsfield: "type",
equals: "Microsoft.Web/sites"
},
{2 itemsfield: "kind",
like: "*api"
},
{2 itemsfield: "kind",
contains: "linux"
}
]
},
then: {2 itemseffect: "[parameters('effect')]",
details: {3 itemstype: "Microsoft.Web/sites/config",
name: "web",
existenceCondition: {1 itemanyOf: [2 items{2 itemsfield: "Microsoft.Web/sites/config/web.linuxFxVersion",
notContains: "PHP"
},
{2 itemsfield: "Microsoft.Web/sites/config/web.linuxFxVersion",
equals: 🔍"[
    concat(
       'PHP|',
         parameters('PHPLatestVersion')
    )
]"
}
]
}
}
}
}
}

[Deprecated]: Ensure that 'PHP version' is the latest, if used as a part of the API app

Azure BuiltIn Policy definition

TableFilter v0.7.3

TableFilter v0.7.3