Ensure function app is integrated with a virtual network

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

Audit from Azure Portal 1. Go to App Services or Function App. 2. Click the name of a function app. 3. Under Settings, click Networking. 4. Under Outbound traffic configuration, next to Virtual network integration, ensure that a virtual network and subnet name are displayed. 5. Repeat steps 1-4 for each function app. Audit from Azure CLI Run the following command to list function apps: az functionapp list For each function app, run the following command to get the virtual network subnet ID: az functionapp show --resource-group <resource-group-name> --name <function- app-name> --query "virtualNetworkSubnetId" Ensure that a virtual network subnet ID is returned. Audit from PowerShell Run the following command to list function apps: Get-AzFunctionApp Run the following command to get the function app in a resource group with a given name: $app = Get-AzFunctionApp -ResourceGroupName <resource-group-name> -Name <function-app-name> Run the following command to get the virtual network subnet ID: $app.virtualNetworkSubnetId Ensure that a virtual network subnet ID is returned. Repeat for each function app.

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Remediate from Azure Portal 1. Go to App Services or Function App. 2. Click the name of a function app. 3. Under Settings, click Networking. 4. Under Outbound traffic configuration, next to Virtual network integration, click Not configured. 5. Click Add virtual network integration. 6. Select an existing App Service Plan connection, or select New connection and select a subscription, virtual network, and subnet. 7. Click Connect. 8. Repeat steps 1-7 for each function app requiring remediation. Remediate from Azure CLI For each function app requiring remediation, run the following command to integrate with a virtual network: az functionapp vnet-integration add --resource-group <resource-group-name> -- name <function-app-name> --vnet <virtual-network-name> --subnet <subnet-name> Remediate from PowerShell For each function app requiring remediation, run the following commands to integrate with a virtual network: Prepare parameters: $siteName = '<app-name>' $vNetResourceGroupName = '<virtual-network-resource-group-name>' $functionAppResourceGroupName = '<function-app-resource-group-name>' $vNetName = '<virtual-network-name>' $integrationSubnetName = '<subnet-name>' $vNetSubscriptionI...