Microsoft Web

Best practices and references below are based on published guidance from the cloud service provider and may reference native capabilities the cloud service provider offers. If you are not using the native security capabilities, the same security requirement can be met using other security capabilities your organization utilizes
Design for High Availability
Design Guidance:
Migrate Azure App Service to availability zone support
docsmsft
Microsoft.Web/serverfarms
Target Worker Count
​Azure Resource Manager​
Sku-Capacity
​Azure Resource Manager​
​
Network Isolation and Segregation
Microsoft.Web/serverfarms/virtualNetworkConnections/gateways
Vpn Package Uri
​Azure Resource Manager​
Microsoft.Web/hostingEnvironments
Network Access Control List
​Azure Resource Manager​
Network Access Control List-Action
​Azure Resource Manager​
Network Access Control List-Description
​Azure Resource Manager​
Network Access Control List-Order
​Azure Resource Manager​
Network Access Control List-Remote Subnet
​Azure Resource Manager​
​
Subnet Isolation
Microsoft.Web/serverfarms/virtualNetworkConnections/routes
Start Address
​Azure Resource Manager​
End Address
​Azure Resource Manager​
Microsoft.Web/hostingEnvironments
Vnet Name
​Azure Resource Manager​
Vnet Resource Group Name
​Azure Resource Manager​
Vnet Subnet Name
​Azure Resource Manager​
Virtual Network
​Azure Resource Manager​
Virtual Network-Id
​Azure Resource Manager​
Virtual Network-Subnet
​Azure Resource Manager​
​
Load Balancing
Microsoft.Web/hostingEnvironments
Internal Load Balancing Mode
​Azure Resource Manager​
Microsoft.Web/sites/config
Load Balancing
​Azure Resource Manager​
​
Hardening
Microsoft.Web/hostingEnvironments
Kind
​Azure Resource Manager​
Microsoft.Web/sites
Kind
​Azure Resource Manager​
Microsoft.Web/sites/deployments
Kind
​Azure Resource Manager​
Microsoft.Web/sites/hostNameBindings
Kind
​Azure Resource Manager​
​
IP Whitelisting
Microsoft.Web/hostingEnvironments
User Whitelisted Ip Ranges
​Azure Resource Manager​
Microsoft.Web/sites/config
Ip Security Restrictions
​Azure Resource Manager​
Ip Security Restrictions-Ip Address
​Azure Resource Manager​
Ip Security Restrictions-Subnet Mask
​Azure Resource Manager​
Ip Security Restrictions-Vnet Subnet Resource Id
​Azure Resource Manager​
Ip Security Restrictions-Action
​Azure Resource Manager​
Ip Security Restrictions-Priority
​Azure Resource Manager​
Ip Security Restrictions-Name
​Azure Resource Manager​
Ip Security Restrictions-Description
​Azure Resource Manager​
Scm Ip Security Restrictions
​Azure Resource Manager​
Scm Ip Security Restrictions-Ip Address
​Azure Resource Manager​
Scm Ip Security Restrictions-Subnet Mask
​Azure Resource Manager​
Scm Ip Security Restrictions-Vnet Subnet Resource Id
​Azure Resource Manager​
Scm Ip Security Restrictions-Action
​Azure Resource Manager​
Scm Ip Security Restrictions-Priority
​Azure Resource Manager​
Scm Ip Security Restrictions-Name
​Azure Resource Manager​
Scm Ip Security Restrictions-Description
​Azure Resource Manager​
​
TLS
Design Guidance:
Security - Azure App Service
docsmsft
Microsoft.Web/sites
Host Name SSL States
​Azure Resource Manager​
Host Name SSL States-Name
​Azure Resource Manager​
Host Name SSL States-SSL State
​Azure Resource Manager​
Host Name SSL States-Virtual Ip
​Azure Resource Manager​
Host Name SSL States-Host Type
​Azure Resource Manager​
HTTPS Only
​Azure Resource Manager​
Site Config-Min TLS Version
​Azure Resource Manager​
Site Config-Ftps State
​Azure Resource Manager​
Microsoft.Web/sites/config
Ftps State
​Azure Resource Manager​
Min TLS Version
​Azure Resource Manager​
Microsoft.Web/sites/hostNameBindings
SSL State
​Azure Resource Manager​
​
Session Binding
Microsoft.Web/sites
Client Affinity Enabled
​Azure Resource Manager​
​
Source Authentication
Design Guidance:
Configure TLS mutual authentication - Azure App Service
docsmsft
Microsoft.Web/sites
Client Cert Mode
​Azure Resource Manager​
Client Cert Enabled
​Azure Resource Manager​
​
App Least Functionality
Design Guidance:
Security recommendations - Azure App Service
docsmsft
Microsoft.Web/sites
Site Config-Remote Debugging Enabled
​Azure Resource Manager​
​
CORS Headers
Microsoft.Web/sites
Site Config-Cors
​Azure Resource Manager​
Cors-Allowed Origins
​Azure Resource Manager​
Cors-Support Credentials
​Azure Resource Manager​
Microsoft.Web/sites/config
Cors
​Azure Resource Manager​
Cors-Allowed Origins
​Azure Resource Manager​
Cors-Support Credentials
​Azure Resource Manager​
​
Application Code Analysis
Microsoft.Web/sites/config
Net Framework Version
​Azure Resource Manager​
Php Version
​Azure Resource Manager​
Python Version
​Azure Resource Manager​
Node Version
​Azure Resource Manager​
Power Shell Version
​Azure Resource Manager​
Linux Fx Version
​Azure Resource Manager​
Windows Fx Version
​Azure Resource Manager​
Java Version
​Azure Resource Manager​
Java Container
​Azure Resource Manager​
Java Container Version
​Azure Resource Manager​
​
Logging
Design Guidance:
Enable diagnostics logging - Azure App Service
docsmsft
Microsoft.Web/sites/config
HTTP Logging Enabled
​Azure Resource Manager​
Logs Directory Size Limit
​Azure Resource Manager​
​
Secure Response Headers
Design Guidance:
Azure App Service access restrictions - Azure App Service
docsmsft
Microsoft.Web/sites/config
Ip Security Restrictions-Headers
​Azure Resource Manager​
Scm Ip Security Restrictions-Headers
​Azure Resource Manager​
​
Design a Hierarchical PKI
Microsoft.Web/sites/hostNameBindings
Thumbprint
​Azure Resource Manager​
​

Last modified 7mo ago

Target Worker Count	Azure Resource Manager
Sku-Capacity	Azure Resource Manager

Network Access Control List	Azure Resource Manager
Network Access Control List-Action	Azure Resource Manager
Network Access Control List-Description	Azure Resource Manager
Network Access Control List-Order	Azure Resource Manager
Network Access Control List-Remote Subnet	Azure Resource Manager

Start Address	Azure Resource Manager
End Address	Azure Resource Manager

Vnet Name	Azure Resource Manager
Vnet Resource Group Name	Azure Resource Manager
Vnet Subnet Name	Azure Resource Manager
Virtual Network	Azure Resource Manager
Virtual Network-Id	Azure Resource Manager
Virtual Network-Subnet	Azure Resource Manager

Ip Security Restrictions	Azure Resource Manager
Ip Security Restrictions-Ip Address	Azure Resource Manager
Ip Security Restrictions-Subnet Mask	Azure Resource Manager
Ip Security Restrictions-Vnet Subnet Resource Id	Azure Resource Manager
Ip Security Restrictions-Action	Azure Resource Manager
Ip Security Restrictions-Priority	Azure Resource Manager
Ip Security Restrictions-Name	Azure Resource Manager
Ip Security Restrictions-Description	Azure Resource Manager
Scm Ip Security Restrictions	Azure Resource Manager
Scm Ip Security Restrictions-Ip Address	Azure Resource Manager
Scm Ip Security Restrictions-Subnet Mask	Azure Resource Manager
Scm Ip Security Restrictions-Vnet Subnet Resource Id	Azure Resource Manager
Scm Ip Security Restrictions-Action	Azure Resource Manager
Scm Ip Security Restrictions-Priority	Azure Resource Manager
Scm Ip Security Restrictions-Name	Azure Resource Manager
Scm Ip Security Restrictions-Description	Azure Resource Manager

Host Name SSL States	Azure Resource Manager
Host Name SSL States-Name	Azure Resource Manager
Host Name SSL States-SSL State	Azure Resource Manager
Host Name SSL States-Virtual Ip	Azure Resource Manager
Host Name SSL States-Host Type	Azure Resource Manager
HTTPS Only	Azure Resource Manager
Site Config-Min TLS Version	Azure Resource Manager
Site Config-Ftps State	Azure Resource Manager

Ftps State	Azure Resource Manager
Min TLS Version	Azure Resource Manager

Client Cert Mode	Azure Resource Manager
Client Cert Enabled	Azure Resource Manager

Site Config-Cors	Azure Resource Manager
Cors-Allowed Origins	Azure Resource Manager
Cors-Support Credentials	Azure Resource Manager

Cors	Azure Resource Manager
Cors-Allowed Origins	Azure Resource Manager
Cors-Support Credentials	Azure Resource Manager

Net Framework Version	Azure Resource Manager
Php Version	Azure Resource Manager
Python Version	Azure Resource Manager
Node Version	Azure Resource Manager
Power Shell Version	Azure Resource Manager
Linux Fx Version	Azure Resource Manager
Windows Fx Version	Azure Resource Manager
Java Version	Azure Resource Manager
Java Container	Azure Resource Manager
Java Container Version	Azure Resource Manager

HTTP Logging Enabled	Azure Resource Manager
Logs Directory Size Limit	Azure Resource Manager

Ip Security Restrictions-Headers	Azure Resource Manager
Scm Ip Security Restrictions-Headers	Azure Resource Manager