53 lines
1.8 KiB
YAML
53 lines
1.8 KiB
YAML
id: azure-appservice-ftps-only-not-enabled
|
|
info:
|
|
name: Azure App Service FTPS-Only Access Not Enabled
|
|
author: princechaddha
|
|
severity: medium
|
|
description: |
|
|
Ensure that your Azure App Services web applications enforce FTPS-only access to encrypt FTP traffic. FTPS (Secure FTP) is used to enhance security for your Azure web application as it adds an extra layer of security to the FTP protocol, and help you to comply with the industry standards and regulations.
|
|
impact: |
|
|
Enabling FTPS-only access enhances the security by encrypting data transfer, thus reducing the risk of data interception and compliance violations.
|
|
remediation: |
|
|
Configure the Azure App Services to enforce FTPS-only access in the Azure portal or use Azure CLI commands to modify the FTPS settings.
|
|
reference:
|
|
- https://docs.microsoft.com/en-us/azure/app-service/configure-ftp
|
|
tags: cloud,devops,azure,microsoft,appservice,azure-cloud-config
|
|
|
|
flow: |
|
|
code(1);
|
|
for (let WebAppId of iterate(template.webAppIdList)) {
|
|
set("id", WebAppId);
|
|
code(2);
|
|
}
|
|
|
|
self-contained: true
|
|
code:
|
|
- engine:
|
|
- sh
|
|
- bash
|
|
source: |
|
|
az webapp list --output json --query '[*].id'
|
|
|
|
extractors:
|
|
- type: json
|
|
name: webAppIdList
|
|
internal: true
|
|
json:
|
|
- '.[]'
|
|
|
|
- engine:
|
|
- sh
|
|
- bash
|
|
source: |
|
|
az webapp config show --ids $id --query 'ftpsState' --output json
|
|
|
|
matchers:
|
|
- type: word
|
|
words:
|
|
- "AllAllowed"
|
|
|
|
extractors:
|
|
- type: dsl
|
|
dsl:
|
|
- 'id + " does not enforce FTPS-only access"'
|
|
# digest: 4a0a00473045022100bffc4b6557028bdd0a57afe3c11f972138a5db19c82c8a769430654ab29646be02203cf535c2d7d036d3bc7f383e667c33cecee8c6fb6605bf47c57b39d368a71336:922c64590222798bb761d5b6d8e72950 |