Function apps should use the latest 'HTTP Version' when used to run the app
Periodically, newer versions are released for HTTP either due to security flaws or to include additional functionality. Function apps should use the latest 'HTTP Version' to take advantage of security fixes, if any, and/or new functionalities of the newer version.
Periodically, newer versions are released for HTTP either due to security flaws or to include additional functionality. Using the latest HTTP version for web apps to take advantage of security fixes, if any, and/or new functionalities of the newer version.
What this control checks
Function apps must be configured to use the latest HTTP version when running the app
Common pitfalls
Currently applies only to Linux web apps
Currently, this policy only applies to Linux web apps.
Audit evidence
Evidence that deployed resources meet this control: Azure Policy compliance results for the built-in policy definition "Function apps should use latest 'HTTP Version'" (e2c1c086-2d84-4019-bff3-c44ccd95113c); PowerPipe control azure_compliance.control.appservice_function_app_latest_http_version.
Scans of the Terraform code that flag the same setting before deployment: Checkov check CKV_AZURE_67.
Framework-specific interpretation
NIST SP 800-53 Rev 5: Mapped to SI-2 (Flaw Remediation) and SI-2(6) (Removal of Previous Versions of Software and Firmware).
FedRAMP Moderate Baseline Rev 4: Mapped to SI-2 (Flaw Remediation).
Framework mappings
The clauses this control is mapped to in each framework.
- SI-2 Flaw Remediation
- SI-2(6) Removal of Previous Versions of Software and Firmware
FedRAMP Moderate Baseline Rev 4
- SI-2 Flaw Remediation
- 3.14.1 Identify, report, and correct system flaws in a timely manner
- SI.L1-3.14.1 Identify, report, and correct system flaws in a timely manner
- SI-2 Flaw Remediation
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
appservice_function_app_latest_http_version - Checkov Check:
CKV_AZURE_67 - Powerpipe Control:
azure_compliance.control.appservice_function_app_latest_http_version - Azure Policy Definition:
e2c1c086-2d84-4019-bff3-c44ccd95113c
Last reviewed: 2026-10-11