question

anoopgeorge-5266 avatar image
0 Votes"
anoopgeorge-5266 asked cheezewhizze-3587 commented

Ensure FTPS for Azure function in Consumption Tier

Azure Advisory recommendation suggests to Ensure FTPS in Azure Functions and to set up in Configuration -> General Settings. But cant see that configuration in Consumption Tier for Azure functions. While Setting the ftpstate via ARM template the Pricing tier changes to PremiumV2. Is there any workaround to mitigate the High Advisory recommendation for Consumption Tier Azure Functions

azure-functions
· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@anoopgeorge-5266 Is it Windows or Linux ?

0 Votes 0 ·

Its Linux

0 Votes 0 ·

Its Linux App

0 Votes 0 ·

1 Answer

JayaC-MSFT avatar image
0 Votes"
JayaC-MSFT answered cheezewhizze-3587 commented
· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Sorry I don't understand how this answer answers the question, which is the same one I have: I have an azure linux function which has a "high" security advisory suggesting "FTPS should be required in your function app" but I don't see anything in the config that would allow me to require this.

Advistory says these are the steps:

Manual remediation:
To ensure enforcement of FTPS only for your function app:
1. Go to the App Service for your API app
2. Select Configuration, and go to the General Settings tab
3. In FTP state, select FTPS only.

But there is no "FTP state" setting in the configuration of the function app.

1 Vote 1 ·

Hello @JayaC-MSFT,
I agree with what you said. Our function app deals with storage accounts only.
Its the Azure advisory recommendation that recommends to use FTPS only but no where to configure that suggestion.
Are you suggesting that this advisory recommendation would be shown for all Azure functions in Linux

0 Votes 0 ·

Hello @anoopgeorge-5266, please check this table to understand the available deployment options for each service plan: https://docs.microsoft.com/en-us/azure/azure-functions/functions-deployment-technologies#deployment-technology-availability

Also, could you please share where do you see this recommendation for Linux consumption plan?

0 Votes 0 ·