Policy: Azure > CIS v3.0 > 09 - Application Services > 09.06 - Ensure that 'Basic Authentication' is 'Disabled' > Attestation

By setting this policy, you attest that you have manually verified that it complies with the relevant section of the CIS Benchmark.

From Azure Portal 1. Search for, and open App Services from the search bar. 2. For each App Service listed: 3. Click on the App Service name. 4. Under the Settings menu item, click on Configuration 5. Under the General settings tab, scroll down to locate the two Basic Auth settings:

• Set the SCM Basic Auth Publishing Credentials radio button to Off • Set the FTP Basic Auth Publishing Credentials radio button to Off

CAUTION: The new settings are not yet applied. Applying them may cause your App Service resource to restart - proceed with caution. Click the Save button, then click Continue to apply the updated configuration. Repeat this procedure for each App Service.

Once verified, enter the date that this attestation expires. Note that the date can not be further in the future than is specified in report level Maximum Attestation Duration policy. Set to a blank value to clear the attestation.