App Services / Access Restrictions - ipSecurityRestrictions

Marcel Fleury (Cloud Admin) 20 Reputation points


I want to retrieve information that App Services has an "access restriction" for

I write this KQL :


| where type == "microsoft.web/sites"

| project name, properties.siteConfig.ipSecurityRestrictions

All rows return with : properties_siteConfig_ipSecurityRestrictions = null

So I deduce that no App Service is configured with a access restriction

But If I check from the Portal, all App Services are configured with "Public network access to Disabled" except for one

This is configured with : Public network access to Enabled with access restrictions

And the rules are

User's image

My question :

Why my KQL script return for all App Service a null for properties_siteConfig_ipSecurityRestrictions

event for the above App Service ?

Or what is wrong in my KQL script ?

Thank you in advance for your help

Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,161 questions
{count} votes

Accepted answer
  1. VenkateshDodda-MSFT 19,621 Reputation points Microsoft Employee

    @Marcel Fleury (Cloud Admin) Thanks for reaching out to Microsoft Q&A, apologize for any inconvenience caused on this.

    You need to use appserviceresources table instead of using resources table to pull the app service which has configure with access restrictions and its rules.

    I have written a sample resource graph explorer query to pull the list of webapps in our subscriptions which has configure with access restrictions.

    | where ['type'] == "microsoft.web/sites" and kind in ("app","app,linux") | distinct name
    | join ( appserviceresources  | where  isnotnull( properties.IpSecurityRestrictions) | project name,properties.IpSecurityRestrictions) on $ == $
    | project AppName=name1, RestrictionsRules=properties_IpSecurityRestrictions

    Here is the sample output for your reference:

    User's image

    Hope this helps, Let me know if you have any further questions on this.

    1 person found this answer helpful.
    0 comments No comments

0 additional answers

Sort by: Most helpful