Function apps should have Application Insights enabled
Azure Function apps are configured to send telemetry to Application Insights when application settings include `APPLICATIONINSIGHTS_CONNECTION_STRING` or `APPINSIGHTS_INSTRUMENTATIONKEY`. Prowler rates the check severity medium.
Without this telemetry, visibility into exceptions, dependencies, and performance is lost, reducing availability and delaying response. Gaps in traces mask anomalous traffic and failures, enabling prolonged outages and undermining integrity of processing (e.g., undetected retries or timeouts).
What this control checks
Function apps must have Application Insights enabled for monitoring and telemetry
Audit evidence
Evidence that deployed resources meet this control: Prowler check app_function_application_insights_enabled (prowler azure --checks app_function_application_insights_enabled).
Framework-specific interpretation
NIS2 Directive (EU 2022/2555): Mapped to 2.1.2.g (identify and prioritise appropriate risk treatment options and measures;), 5.1.2.a (the cybersecurity practices of the suppliers and service providers, including their secure development procedures;), 6.2.1 (Before developing a network and information system, including software, the relevant entities shall lay down rules for...) and 2 more clauses.
Framework mappings
The clauses this control is mapped to in each framework.
- 2 Risk management policy
- 5 Supply chain security
- 6 Security in network and information systems acquisition, development and maintenance
RBI Cyber Security Framework for UCBs
- Annex I (7.4)
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
azure_app_function_application_insights_enabled - Prowler Check:
app_function_application_insights_enabled
Last reviewed: 2026-10-11