Ensure Web App is using the latest version of TLS encryption - azurerm_linux_web_app

Description:

The TLS (Transport Layer Security) protocol secures transmission of data over the internet using standard encryption technology. Encryption should be set with the latest version of TLS. App service allows TLS 1.2 by default, which is the recommended TLS level by industry standards such as PCI DSS.

Rationale:

App service currently allows the web app to set TLS versions 1.0, 1.1 and 1.2. It is highly recommended to use the latest TLS 1.2 version for web app secure connections.

From Azure Portal

1. Login to Azure Portal using https://portal.azure.com
2. Go to 'App Services'
3. Click on each App
4. Under 'Setting' section, Click on 'SSL settings'
5. Under the 'Bindings' pane, set 'Minimum TLS Version' to '1.2' under 'Protocol Settings' section

From Azure CLI

To set TLS Version for an existing app, run the following command:

az webapp config set --resource-group --name --min-tls-version 1.2

From PowerShell

Set-AzWebApp -ResourceGroupName -Name -MinTlsVersion 1.2