Azure Static Web Apps Https only, disable FTP, TLS control

Meron Gebremedhin 1 Reputation point
2021-09-29T18:19:06.14+00:00

Hello,

I am struggling to find the right controls to start configuring the static app to be accessed only
*from HTTPS/to
*disable FTP and
*TLS 1.2 only access

I appreciate all help and guidance on this issue

Thank you
MG

Edited: title for more clarity

Azure Static Web Apps
Azure Static Web Apps
An Azure service that provides streamlined full-stack web app development.
770 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Alan Kinane 16,786 Reputation points MVP
    2021-09-29T19:35:04.827+00:00

    Have you deployed it yet? It will only take a few minutes to create if you want to take a look. I just checked one of my own deployments and I can confirm all of these settings are in place and as far as I can see these settings can't be changed. This is a relatively new Azure service so it was designed to be secure by default.

    2 people found this answer helpful.
    0 comments
  2. ajkuma 22,416 Reputation points Microsoft Employee
    2021-09-30T18:16:06.07+00:00

    @Meron Gebremedhin , As AlanKinane (thank you) correctly described:

    HTTPS is always enabled on Azure Static Web apps.
    Azure Static Web Apps works exclusively with GitHub repositories, so FTP is not an option.
    Azure Static Web App platform manages the TLS settings. So, it is always up to date.

    I have relayed the feedback to our product engineering team to see if these points can be explicitly highlighted in the Azure docs for bringing additional clarity.

    Thanks for your cooperation. Much appreciate your value feedback on this.

    Edited: title and adding an answer.
    To benefit the community find the right answers, please do mark the post which was helpful by clicking on ‘Accept Answer’ & ‘Up-Vote’.