# Cis Azure Compute 2.7

> Cis Azure Compute 2.7 is an Agent Skill for devops & security published in the CyberStrikeus/CyberStrike repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

Ensure App Service Environment is provisioned with v3 or higher

- Skill name: `cis-azure-compute-2.7`
- Category: [DevOps & Security](https://www.openparable.com/skill/devops-security/1)
- Source: https://github.com/CyberStrikeus/CyberStrike/blob/HEAD/.cyberstrike/skill/CIS_benchmarks/Cloud_Providers/Microsoft_Azure/CIS_Microsoft_Azure_Compute_Services_Benchmark_v2.0.0/cis-azure-compute-2.7/SKILL.md
- Repository: CyberStrikeus/CyberStrike (1,211 GitHub stars when collected)

## SKILL.md

# Ensure App Service Environment is provisioned with v3 or higher

## Description

Ensure App Service Environment is provisioned with v3 or higher to benefit from the latest enhancements.

## Rationale

Older versions of App Service Environment require manual management of Azure resources and have greater scaling limitations.

## Impact

Manual configuration may be required to complete the migration and to optimize your App Service plan SKU choice to meet your needs.

## Audit Procedure

### Using Azure Portal

1. Go to `App Service Environments`.
2. Click the name of an App Service Environment.
3. Ensure that `Version` displays `App Service Environment v3` or higher.
4. Repeat steps 1-3 for each App Service Environment.

### Using Azure CLI

Run the following command to list App Service Environments:

```bash
az appservice ase list
```

For each App Service Environment, ensure that `kind` is set to `ASEV3` or higher.

## Expected Result

The `kind` property should be `ASEV3` or higher. The `Version` should display `App Service Environment v3`.

## Remediation

### Using Azure Portal

When creating an App Service Environment from the portal, after clicking `+ Add`, ensure that `Create App Service Environment v3` is displayed.

## Default Value

The default version is currently App Service Environment v3.

## Additional Information

App Service Environment v1 and v2 were retired as of 31 August, 2024. As of September 1, 2024, Azure auto-migrated any remaining App Service Environment v1 and v2 on a best-effort basis.

## References

1. https://learn.microsoft.com/en-us/azure/app-service/environment/overview
2. https://azure.microsoft.com/en-gb/updates?id=App-Service-Environment-v1v2-Retirement-Update-1
3. https://learn.microsoft.com/en-us/azure/app-service/environment/auto-migration
4. https://learn.microsoft.com/en-us/cli/azure/appservice/ase

## Profile

Level 1 | Automated

---

Source: https://www.openparable.com/skill/devops-security/cis-azure-compute-2-7 (OpenParable). Cite the canonical URL above.