azureencryptionazure-web-app-service

Change Minimum Inbound TLS Cipher Suite for Azure App Service

For my Azure App Service I have Minimum Inbound TLS Cipher Suite set to TLS_RSA_WITH_AES_128_CBC_SHA. For my App Service it is: enter image description here

I know that I can change it manually via App service -> Configuration but is there any az command to change it programmatically?

Solution

  • You can configure the Minimum Inbound TLS Cipher Suite programmatically using Azure CLI.
    Instead of setting it manually in App Service → Configuration → General Settings, you can apply it directly like this:

    az webapp config set \
  --resource-group <resource-group-name> \
  --name <app-service-name> \
  --min-tls-cipher-suite TLS_RSA_WITH_AES_128_CBC_SHA

    This updates the App Service to require the specified minimum cipher suite.
    Official docs for reference:
    Azure CLI webapp config → https://learn.microsoft.com/cli/azure/webapp/config
    TLS Cipher configuration background → https://azure.github.io/AppService/2022/10/11/Public-preview-min-tls-cipher-suite.html