> ## Documentation Index
> Fetch the complete documentation index at: https://cloudanix.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Enable Always On For App Services

### More Info:

Ensure that your Azure App Services web applications stay loaded all the time by enabling the Always On feature.

### Risk Level

Medium

### Address

Security

### Compliance Standards

CBP

### Triage and Remediation

<Tabs>
  <Tab title="Remediation">
    ### Remediation

    <AccordionGroup>
      <Accordion title="Using Console" defaultOpen="true">
        Enabling Always On for App Services in Azure ensures that your web application is always running and responsive. Here are the steps to remediate this misconfiguration in Azure using the Azure console:

        1. Log in to the Azure portal ([https://portal.azure.com/](https://portal.azure.com/)).

        2. Navigate to the App Service that needs to be remediated.

        3. Click on the "Configuration" blade on the left-hand side of the screen.

        4. Scroll down to the "General settings" section and locate the "Always On" setting.

        5. Toggle the switch next to "Always On" to the "On" position.

        6. Click "Save" to apply the changes.

        7. Restart the App Service to ensure that the changes take effect.

        Once you have completed these steps, your App Service will be configured to use Always On, ensuring that it is always running and responsive.

        #
      </Accordion>

      <Accordion title="Using CLI">
        To remediate the misconfiguration "Enable Always On for App Services" in Azure using Azure CLI, you can follow these steps:

        1. Open the Azure CLI command prompt.

        2. Run the following command to set the resource group where the App Service is deployed:

        ```
        az configure --defaults group=<resource-group-name>
        ```

        3. Run the following command to enable Always On for the App Service:

        ```
        az webapp config set --always-on true --name <app-service-name> --resource-group <resource-group-name>
        ```

        4. Verify that Always On is enabled for the App Service by running the following command:

        ```
        az webapp config show --name <app-service-name> --resource-group <resource-group-name> --query alwaysOn
        ```

        This command should return a value of "true", indicating that Always On is enabled for the App Service.

        By following these steps, you can remediate the misconfiguration "Enable Always On for App Services" in Azure using Azure CLI.
      </Accordion>

      <Accordion title="Using Python">
        To remediate the misconfiguration "Enable Always On For App Services" in Azure using Python, follow these steps:

        1. Import the necessary libraries:

        ```python theme={null}
        from azure.identity import DefaultAzureCredential
        from azure.mgmt.web import WebSiteManagementClient
        ```

        2. Authenticate with Azure using the DefaultAzureCredential:

        ```python theme={null}
        credential = DefaultAzureCredential()
        ```

        3. Instantiate a WebSiteManagementClient object:

        ```python theme={null}
        subscription_id = '<your-subscription-id>'
        resource_group_name = '<your-resource-group-name>'
        webapp_name = '<your-webapp-name>'

        client = WebSiteManagementClient(credential, subscription_id)
        ```

        4. Get the current configuration of the web app:

        ```python theme={null}
        webapp = client.web_apps.get(resource_group_name, webapp_name)
        ```

        5. Check if Always On is enabled:

        ```python theme={null}
        if webapp.always_on:
            print('Always On is already enabled.')
        else:
            print('Always On is not enabled.')
        ```

        6. If Always On is not enabled, update the configuration:

        ```python theme={null}
        webapp.always_on = True
        client.web_apps.create_or_update(resource_group_name, webapp_name, webapp)
        print('Always On has been enabled.')
        ```

        The complete code to remediate the misconfiguration "Enable Always On For App Services" in Azure using Python would look like this:

        ```python theme={null}
        from azure.identity import DefaultAzureCredential
        from azure.mgmt.web import WebSiteManagementClient

        credential = DefaultAzureCredential()

        subscription_id = '<your-subscription-id>'
        resource_group_name = '<your-resource-group-name>'
        webapp_name = '<your-webapp-name>'

        client = WebSiteManagementClient(credential, subscription_id)

        webapp = client.web_apps.get(resource_group_name, webapp_name)

        if webapp.always_on:
            print('Always On is already enabled.')
        else:
            webapp.always_on = True
            client.web_apps.create_or_update(resource_group_name, webapp_name, webapp)
            print('Always On has been enabled.')
        ```
      </Accordion>
    </AccordionGroup>
  </Tab>
</Tabs>