AZ-013 Microsoft Azure

Secure transfer (HTTPS-only) is required.

Secure transfer (HTTPS-only) is required.

Domain
Microsoft Azure
Area
Storage
Automated / manual
Automated

Risk if it fails

Plain HTTP can be intercepted.

Without HTTPS enforcement, data travels in clear text and anyone on the network path can read or alter it in transit, including credentials.

How Tess tests it

1 test — each concludes only on cited evidence.

Secure transfer (HTTPS-only) is required.

Automated
Procedure
Confirm enableHttpsTrafficOnly=true.

Read-only command 

az storage account list --query '[].{Name:name,HttpsOnly:enableHttpsTrafficOnly}' -o table

More in Microsoft Azure

AZ-001 MFA is enforced for all users, especially privileged roles. AZ-002 Number of Global Administrators is limited (typically 2-4). AZ-003 Privileged Identity Management (PIM) provides just-in-time elevation. AZ-004 Legacy/basic authentication is blocked.

Want Tess to test AZ-013 against your evidence?

Book a demo