App Service web apps should have Always On enabled
This control ensures that a web app is configured with settings to keep it consistently active. Always On keeps the host process running. Checkov CKV_AZURE_214 asks that the App Service is set to be always on.
This allows your site to be more responsive to requests after significant idle periods.
What this control checks
App Service web apps should have Always On enabled
Common pitfalls
Missing site_config block passes the check
Checkov CKV_AZURE_214 passes when the site_config block is missing (missing_block_result is PASSED).
Continuous WebJobs must use always on
Continuous WebJobs or WebJobs triggered with a CRON expression must use always on to start.
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.appservice_web_app_always_on.
Scans of the Terraform code that flag the same setting before deployment: Checkov check CKV_AZURE_214.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
appservice_web_app_always_on - Checkov Check:
CKV_AZURE_214 - Powerpipe Control:
azure_compliance.control.appservice_web_app_always_on
Last reviewed: 2026-10-11