azure-app-service-security
Installation
SKILL.md
Azure App Service Security
Azure App Service hosts web apps and APIs as a managed PaaS. Securing it means eliminating secrets in config, removing public exposure where possible, enforcing modern transport, and fronting it with a WAF when it has to be public.
When to use
Hardening web apps and APIs hosted on Azure App Service. Use this skill to plan identity, network, secrets, and transport posture for a Web App / API App.
Do not use this skill for Azure Functions only (similar but separate platform), AKS workloads, or VM-hosted web apps.