Project: KICS (Provisioning / Security & Compliance)
File: b5c851d5-00f1-43dc-a8de-3218fd6f71be.md

title: Web App Not Using TLS Last Version hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: b5c851d5-00f1-43dc-a8de-3218fd6f71be Query name: Web App Not Using TLS Last Version Platform: AzureResourceManager Severity: <span style="color:#ff7213">Medium</span> Category: Encryption URL: Resources of type 'Microsoft.Web/sites' should define 'properties.siteConfig.minTlsVersion' with '1.2'<br> ```json title="Positive test num. 1 - json file" hl_lines="12" { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "1.0.0.0", "resources": [ { "type": "Microsoft.Web/sites", "apiVersion": "2020-12-01", "name": "App", "location": "[resourceGroup().location]", "properties": { "siteConfig": { "minTlsVersion": "1.0" } } } ] } ``` ```json title="Positive test num. 2 - json file" hl_lines="8" { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "1.0.0.0", "resources": [ { "type": "Microsoft.Web/sites", "apiVersion": "2020-12-01", "name": "App", "location": "[resourceGroup().location]", "properties": {} } ] } ``` ```json title="Positive test num. 3 - json file" hl_lines="14" { "properties": { "template": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "1.0.0.0", "resources": [ { "type": "Microsoft.Web/sites", "apiVersion": "2020-12-01", "name": "App", "location": "[resourceGroup().location]", "properties": { "siteConfig": { "minTlsVersion": "1.0" } } } ], "outputs": {} }, "parameters": {} }, "kind": "template", "type": "Microsoft.Blueprint/blueprints/artifacts", "name": "myTemplate" } ``` <details><summary>Positive test num. 4 - json file</summary> ```json hl_lines="10" { "properties": { "template": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "1.0.0.0", "resources": [ { "type": "Microsoft.Web/sites", "apiVersion": "2020-12-01", "name": "App", "location": "[resourceGroup().location]", "properties": {} } ], "outputs": {} }, "parameters": {} }, "kind": "template", "type": "Microsoft.Blueprint/blueprints/artifacts", "name": "myTemplate" } ``` </details> ```json title="Negative test num. 1 - json file" { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "1.0.0.0", "resources": [ { "type": "Microsoft.Web/sites", "apiVersion": "2020-12-01", "name": "App", "location": "[resourceGroup().location]", "properties": { "siteConfig": { "minTlsVersion": "1.2" } } } ] } ``` ```json title="Negative test num. 2 - json file" { "properties": { "template": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "1.0.0.0", "resources": [ { "type": "Microsoft.Web/sites", "apiVersion": "2020-12-01", "name": "App", "location": "[resourceGroup().location]", "properties": { "siteConfig": { "minTlsVersion": "1.2" } } } ], "outputs": {} }, "parameters": {} }, "kind": "template", "type": "Microsoft.Blueprint/blueprints/artifacts", "name": "myTemplate" } ```