Loading controls...
Control: Function apps should not have CORS configured to allow every resource to access your apps
Description
Cross-Origin Resource Sharing (CORS) should not allow all domains to access your Function app. Allow only required domains to interact with your Function app.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.appservice_function_app_cors_no_starSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.appservice_function_app_cors_no_star --shareSQL
This control uses a named query:
appservice_function_app_cors_no_star