---
type: post-synth-check
title: AZR021
description: App Service missing HTTPS-only — set httpsOnly to true to enforce encrypted traffic
id: AZR021
severity: error
category: post-synth
lexicon: azure
docs: https://intentius.io/chant/lexicons/azure/rules/
---
App Service missing HTTPS-only — set httpsOnly to true to enforce encrypted traffic

## Applies to

- [AppService](/types/AppService.md)
- [resources](/types/resources.md)