API Management services should have client certificates enabled
Checks whether the client certificate setting is enabled on each API Management service. A service is reported as non-compliant when its `client certificate` setting is disabled, and it is reported as compliant when the setting is enabled.
What this control checks
API Management services should have client certificates enabled
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.apimanagement_service_client_certificate_enabled.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
apimanagement_service_client_certificate_enabled - Powerpipe Control:
azure_compliance.control.apimanagement_service_client_certificate_enabled
Last reviewed: 2026-10-09