Azure Advisory recommendation suggests to Ensure FTPS in Azure Functions and to set up in Configuration -> General Settings. But cant see that configuration in Consumption Tier for Azure functions. While Setting the ftpstate via ARM template the Pricing tier changes to PremiumV2. Is there any workaround to mitigate the High Advisory recommendation for Consumption Tier Azure Functions

Hello @anoop.george , I believe this might help https://github.com/projectkudu/kudu/issues/3068#issuecomment-545732193 https://github.com/projectkudu/kudu/issues/3068#issuecomment-643386217

Ensure FTPS for Azure function in Consumption Tier

Accepted answer

JayaC-MSFT 5,531 Reputation points

2021-04-16T14:54:09.623+00:00

Hello @anoop.george , I believe this might help https://github.com/projectkudu/kudu/issues/3068#issuecomment-545732193

https://github.com/projectkudu/kudu/issues/3068#issuecomment-643386217
Please sign in to rate this answer.
anoop.george 21 Reputation points

2021-04-19T09:20:36.453+00:00

Hello @JayaC-MSFT ,
I agree with what you said. Our function app deals with storage accounts only.
Its the Azure advisory recommendation that recommends to use FTPS only but no where to configure that suggestion.
Are you suggesting that this advisory recommendation would be shown for all Azure functions in Linux

JayaC-MSFT 5,531 Reputation points

2021-04-19T11:17:49.477+00:00

Hello @anoop.george , please check this table to understand the available deployment options for each service plan: https://learn.microsoft.com/en-us/azure/azure-functions/functions-deployment-technologies#deployment-technology-availability

Also, could you please share where do you see this recommendation for Linux consumption plan?

cheezewhizze 6 Reputation points

2021-09-03T20:41:45.21+00:00

Sorry I don't understand how this answer answers the question, which is the same one I have: I have an azure linux function which has a "high" security advisory suggesting "FTPS should be required in your function app" but I don't see anything in the config that would allow me to require this.

Advistory says these are the steps:

Manual remediation:
To ensure enforcement of FTPS only for your function app:

Go to the App Service for your API app

Select Configuration, and go to the General Settings tab

In FTP state, select FTPS only.

But there is no "FTP state" setting in the configuration of the function app.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Ensure FTPS for Azure function in Consumption Tier

0 additional answers

Your answer