How to complete setup Azure security baseline for App Service?

Question

Hi There,

Based on this documentation https://learn.microsoft.com/en-us/security/benchmark/azure/baselines/app-service-security-baseline I would like to follow and apply for our App Service. How can I do and check after setup to ensure setup is right.

Specially sections AM-2, DP-6 and PA-7 mentioned in the guideline https://learn.microsoft.com/en-us/security/benchmark/azure/baselines/app-service-security-baseline.

Thanks for your support!

Answer 1

To apply the security baseline for your Azure App Service, you can follow these steps for the specific sections you mentioned:

AM-2: Use automated asset discovery:

• Ensure you have Azure Policy enabled to automatically discover and monitor your assets. You can use Azure Resource Graph to query and explore your resources.

DP-6: Use a secure key management process:

• Integrate Azure Key Vault with your App Service to manage your keys, secrets, and certificates securely. This integration ensures that your sensitive data is protected and managed according to best practices.

PA-7: Use privileged access workstations:

• Implement Privileged Access Workstations (PAWs) for administrative tasks. This involves setting up dedicated, hardened workstations that are used exclusively for sensitive tasks to reduce the risk of credential theft and other security breaches.

After setting up these configurations, you can verify the setup by:

• Using Azure Policy to audit and enforce compliance with the security baseline.
• Monitoring your resources with Microsoft Defender for Cloud to ensure they adhere to the security recommendations.
• Review the Regulatory Compliance dashboard in Microsoft Defender for Cloud regularly to identify non-compliant resources and take corrective actions.

---

If this answers your question, please click Accept Answer and Yes if this answer was helpful. Doing so would help other community members with similar issues identify the solution. I highly appreciate your contribution to the community.