Forum Discussion
nabi04
Jan 06, 2021Copper Contributor
Disable FTP in Azure Policy
Hello all, is there an equivalent azure policy that disables the FTP of my applications in my subscription? If none, how can I disable the FTP of the applications under my subscription?
- Jan 06, 2021
You're welcome it's mentionned on the definition FTPs (s=secure) . If FTPs is enabled FTP will be disabled .
Below the details :
NameFTPS should be required in your Web AppDescriptionEnable FTPS enforcement for enhanced securityAvailable EffectsAuditIfNotExists, DisabledCategoryApp ServiceJson definition :{"properties": {"displayName": "FTPS should be required in your Web App","policyType": "BuiltIn","mode": "Indexed","description": "Enable FTPS enforcement for enhanced security","metadata": {"version": "2.0.0","category": "App Service"},"parameters": {"effect": {"type": "String","metadata": {"displayName": "Effect","description": "Enable or disable the execution of the policy"},"allowedValues": ["AuditIfNotExists","Disabled"],"defaultValue": "AuditIfNotExists"}},"policyRule": {"if": {"allOf": [{"field": "type","equals": "Microsoft.Web/sites"},{"field": "kind","like": "app*"}]},"then": {By the way if you want to disable both you cannot do that through policy but it's documentedTo disable both FTP and FTPS entirely, select Disabled. When finished, click Save
Jamesdld
Jan 26, 2021Copper Contributor
If it can help, please find here JamesDLD/azure-policies a custom policy that disables FTP on Web App using an ARM Template deployment script for the remediation.
In the same repo I have published the ones for API and Function App, always using the
effect "DeployIfNotExists".
Regards,
Jamesdld