Azure App Service Web app does not use latest PHP version

Description

Azure App Service web applications developed with the PHP should use the latest available version of PHP to ensure the latest security fixes are in use.

Code Example

resource "azurerm_app_service" "example" {
  ...
+  site_config {
+    php_version = "7.4"
  }
}

Remediation

Terraform

• Resource: azurerm_app_service
• Arguments: php_version - (Optional) The version of PHP to use in this App Service.

Possible values are 5.5, 5.6, 7.0, 7.1, 7.2, 7.3 and 7.4.

Rule Details

Field	Value
ID	IAC-0589
Severity	LOW
IaC Type	arm
Frameworks	Terraform, TerraformPlan
Checkov ID	CKV_AZURE_81

References

• Checkov Rule

---