App Service web apps should have failed request tracing enabled
Ensure that App service enables failed request tracing (checkov CKV_AZURE_66). Web app failed request tracing should be enabled (powerpipe). The control is non-compliant if Web app failed request tracing is disabled.
What this control checks
App Service web apps should have failed request tracing enabled
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.appservice_web_app_failed_request_tracing_enabled.
Scans of the Terraform code that flag the same setting before deployment: Checkov check CKV_AZURE_66.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
appservice_web_app_failed_request_tracing_enabled - Checkov Check:
CKV_AZURE_66 - Powerpipe Control:
azure_compliance.control.appservice_web_app_failed_request_tracing_enabled
Last reviewed: 2026-10-11