Loading controls...
Control: CORS should not allow every resource to access your Web Applications
Description
Cross-Origin Resource Sharing (CORS) should not allow all domains to access your web application. Allow only required domains to interact with your web app.
Usage
Run the control in your terminal:
steampipe check terraform_azure_compliance.control.appservice_web_app_cors_no_star
Snapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share terraform_azure_compliance.control.appservice_web_app_cors_no_star
SQL
This control uses a named query:
appservice_web_app_cors_no_star