Find all web apps and function apps that are below TLS 1.2

Question

In Azure Advisor I have the following security advisories:

1. TLS should be updated to the latest version for web apps
2. TLS should be updated to the latest version for function apps

How can I get a list of all of the affected resources that are not set to TLS 1.2? I am able to view resources that aren't TLS 1.2 for storage accounts using Azure Resource Graph Explorer and the query below. Is this possible for function apps and web apps? I tried using the type "Microsoft.Web/sites" and "Microsoft.Web/sites/functions", but it only yields 0 results.

resources

| where type == "microsoft.storage/storageaccounts"

| where properties['minimumTlsVersion'] != "TLS1_2"

| project name, resourceGroup, properties.minimumTlsVersion

Answer 1

The query should work like this (not tested):

resources
| where type == "microsoft.web/sites"
| extend tlsVersion = tostring(properties.siteConfig.minimumTlsVersion)
| where tlsVersion != "1.2"

I can also recommend Azure Quick Review (https://github.com/Azure/azqr) which is a CLI that can also list you that ressources.