Following "Access to App Services should be restricted" recommendation for public App service

Question

We have some app services that are private (and have IP restrictions applied), but some are supposed to be publicly accessible. I would like to keep the recommendation rule active on the subscription level, but can't find a way to solve it or suppress for our public services. The recommendation text itself also only seem to refer to the case where you want to disable public access.

Answer 1

Hi @Lars Rinde , sincerest apologies for the delayed response. To suppress your recommendation rules, have a look at https://learn.microsoft.com/en-us/azure/security-center/tutorial-security-policy#disable-security-policies and let me know if this is helpful or not.

Having said that, while it's definitely not required, the recommended rule can in-fact be applied to your public facing services by placing a WAF on either Azure Front Door or App Gateway so traffic is forced through the WAF.