Ensure that IP restrictions rules are configured for Azure App Service

MEDIUM

Description

IP restrictions on Azure App Service can help protect the resources from unauthorized access. For more information on setting up restrictions in App Service, see the Azure documentation.
Resources:
https://learn.microsoft.com/en-us/azure/app-service/app-service-ip-restrictions

Remediation

In Azure Console -

  1. Open the Azure Portal and go to App Services.
  2. Choose the App you wish to edit.
  3. Under Settings, select Networking.
  4. Under Access Restrictions, select Configure Access Restrictions.
  5. Configure restrictions accordingly.

In Terraform -

  1. In the azurerm_app_service resource, configure the ip_restriction block accordingly.

References:
https://learn.microsoft.com/en-us/azure/app-service/app-service-ip-restrictions?tabs=azurecli
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/app_service#ip_restriction

Policy Details

Rule Reference ID: AC_AZURE_0196
CSP: Azure
Remediation Available: No
Resource Category: Serverless
Resource Type: App Service

Frameworks