App Services / Access Restrictions - ipSecurityRestrictions

Question

Hello,

I want to retrieve information that App Services has an "access restriction" for

I write this KQL :

resources

| where type == "microsoft.web/sites"

| project name, properties.siteConfig.ipSecurityRestrictions

All rows return with : properties_siteConfig_ipSecurityRestrictions = null

So I deduce that no App Service is configured with a access restriction

But If I check from the Portal, all App Services are configured with "Public network access to Disabled" except for one

This is configured with : Public network access to Enabled with access restrictions

And the rules are

My question :

Why my KQL script return for all App Service a null for properties_siteConfig_ipSecurityRestrictions

event for the above App Service ?

Or what is wrong in my KQL script ?

Thank you in advance for your help

Answer 1

@Marcel Fleury (Cloud Admin) Thanks for reaching out to Microsoft Q&A, apologize for any inconvenience caused on this.

You need to use appserviceresources table instead of using resources table to pull the app service which has configure with access restrictions and its rules.

I have written a sample resource graph explorer query to pull the list of webapps in our subscriptions which has configure with access restrictions.

resources
| where ['type'] == "microsoft.web/sites" and kind in ("app","app,linux") | distinct name
| join ( appserviceresources  | where  isnotnull( properties.IpSecurityRestrictions) | project name,properties.IpSecurityRestrictions) on $left.name == $right.name
| project AppName=name1, RestrictionsRules=properties_IpSecurityRestrictions

Here is the sample output for your reference:

Hope this helps, Let me know if you have any further questions on this.