Skip to content

Commit b89dce3

Browse files
committed
linter
1 parent 78f5e59 commit b89dce3

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

articles/app-service/overview-tls.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ Azure App Service supports the following TLS versions for incoming requests to y
4343

4444
You can configure the **minimum TLS version** for incoming requests to your web app and its SCM site. By default, the minimum is set to **TLS 1.2**.
4545

46-
You can use Azure Policy to help audit your resources when it comes to minimum TLS version. You can refer to [App Service apps should use the latest TLS version policy definition](https://ms.portal.azure.com/#view/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Ff0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b) and change the values to your desired minimum TLS version. For similar policy definitions for other App Service resources, refer to [List of built-in policy definitions - Azure Policy for App Service](../governance/policy/samples/built-in-policies.md#app-service).
46+
You can use Azure Policy to help audit your resources when it comes to minimum TLS version. You can refer to [App Service apps should use the latest TLS version policy definition](https://ms.portal.azure.com/#view/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Ff0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b) and change the values to your desired minimum TLS version. For similar policy definitions for other App Service resources, refer to [List of built-in policy definitions - Azure Policy for App Service](../governance/policy/samples/built-in-policies.md#app-service).
4747

4848
### TLS 1.3
4949

@@ -56,6 +56,7 @@ TLS 1.3 is fully supported on App Service and introduces several improvements ov
5656
To require TLS 1.3 for all inbound requests, set your **Minimum Inbound TLS Version** to **TLS 1.3** in the Azure portal, CLI, or ARM templates.
5757

5858
TLS 1.3 supports the following cipher suites, which are fixed and cannot be customized:
59+
5960
- `TLS_AES_256_GCM_SHA384`
6061
- `TLS_AES_128_GCM_SHA256`
6162

@@ -99,10 +100,12 @@ Once you update your cluster setting, **you must restart your front-end** for th
99100
End-to-end (E2E) TLS encryption ensures that **front-end to worker communication** within Azure App Service is encrypted using TLS. Without this feature, while incoming HTTPS requests are encrypted to the front ends, the traffic from front ends to workers running the application workloads would travel unencrypted inside Azure’s infrastructure.
100101

101102
E2E TLS helps ensure **full encryption of traffic** between:
103+
102104
- Clients and App Service front ends.
103105
- App Service front ends and worker processes hosting the application.
104106

105107
This feature is available on:
108+
106109
- **Premium App Service plans** (recommended for new deployments).
107110
- **Legacy Standard App Service plans** (existing users).
108111

@@ -112,6 +115,7 @@ This feature is available on:
112115
### How to enable end-to-end TLS encryption
113116

114117
You can enable E2E TLS encryption via:
118+
115119
- **Azure portal** settings.
116120
- **Azure CLI** commands.
117121
- **ARM templates** for automation.

0 commit comments

Comments
 (0)