turbot/terraform_azure_compliance
Loading controls...

Control: CORS should not allow every resource to access your Function Apps

Description

Cross-Origin Resource Sharing (CORS) should not allow all domains to access your Function app. Allow only required domains to interact with your Function app.

Usage

Run the control in your terminal:

powerpipe control run terraform_azure_compliance.control.appservice_function_app_cors_no_star

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_azure_compliance.control.appservice_function_app_cors_no_star --share

SQL

This control uses a named query:

appservice_function_app_cors_no_star

Tags