Query: Ensure the web app has 'Client Certificates (Incoming client certificates)' set to 'On'

Description

Client certificates allow for the app to request a certificate for incoming requests. Only clients that have a valid certificate will be able to reach the app.

Query

Tables used in this query:

• azure_app_service_web_app
• azure_subscription

Controls using this query:

• 9.4 Ensure the web app has 'Client Certificates (Incoming client certificates)' set to 'On'
• 9.4 Ensure the web app has 'Client Certificates (Incoming client certificates)' set to 'On'
• 9.4 Ensure the web app has 'Client Certificates (Incoming client certificates)' set to 'On'
• 9.4 Ensure the web app has 'Client Certificates (Incoming client certificates)' set to 'On'
• Ensure the web app has 'Client Certificates (Incoming client certificates)' set to 'On'

SQL