> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/unified-identities/azure-identities/azure-resource-management/web-apps.md).

# Web Apps

Open **Unified Identities › Resources**, filter **Providers** to **Azure Resource Management › Web App**, then select a row to open its details. Web apps are Azure App Service web apps.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-5935f0eecb3c8d8b8728a4bb3dc827315f59dcc0%2Fwebapps_list.PNG?alt=media" alt=""><figcaption><p>Web Apps</p></figcaption></figure>

#### Web Apps Details

Details page contains the `Risk` and `Exposure Point` of the web app and the `Information` pane.

{% hint style="info" %}
You can analyze the object in the [Graph](/forestall/visualize/visualize.md) by clicking the **Graph »** button next to the `Information` title.
{% endhint %}

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-e651ee91e627e77602a2faa7c887c588bc9c4213%2Fwebapps_details.PNG?alt=media" alt=""><figcaption><p>Web Apps Details</p></figcaption></figure>

#### Information

`Information Pane` contains `Details` and `Managed Identities` tabs.

A `Tier 0` or `Tier 2` badge on the right of the `Information` title shows the tier of the web app.

#### Details

Details tab contains attributes below about the web app.

| Attribute           | Description                                                    |
| ------------------- | -------------------------------------------------------------- |
| Name                | The display name of the web app with tenant suffix             |
| Location            | The Azure region where the web app is deployed                 |
| Kind                | The kind of App Service resource (e.g., app, linux)            |
| State               | The current state of the web app (e.g., Running)               |
| Default Host Name   | The default hostname assigned to the web app                   |
| HTTPS Only          | Indicates whether the web app accepts only HTTPS traffic       |
| Client Cert Enabled | Indicates whether client certificate authentication is enabled |
| Tenant              | The tenant the web app belongs to                              |
| Resource Group      | The resource group the web app is associated with              |

**Runtime**

When runtime configuration is available, the following attributes are shown in a separate **Runtime** section.

| Attribute              | Description                                           |
| ---------------------- | ----------------------------------------------------- |
| Runtime Stack          | The application runtime stack (e.g., NODE, DOTNET)    |
| Runtime Version        | The version of the runtime stack                      |
| Linux Stack Version    | The Linux FX version string (e.g., NODE\|18-lts)      |
| Windows Stack Version  | The Windows FX version string                         |
| .NET Framework Version | The .NET Framework version configured for the web app |
| Node.js Version        | The Node.js version configured for the web app        |
| Python Version         | The Python version configured for the web app         |
| Java Version           | The Java version configured for the web app           |
| PHP Version            | The PHP version configured for the web app            |

#### Managed Identities

The `Managed Identities` tab lists Azure Active Directory service principals (managed identities) assigned to the web app. A managed identity lets the web app authenticate to other Azure resources (e.g. Key Vault, Storage, SQL) without storing credentials in code or configuration. Any role granted to an identity listed here is effectively granted to this web app, so these identities are part of its attack surface.

| Attribute    | Description                                                 |
| ------------ | ----------------------------------------------------------- |
| Name         | The display name of the managed identity with tenant suffix |
| Display Name | The display name of the service principal                   |
| Type         | The service principal type (e.g., ManagedIdentity)          |

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-2060e439396aa26bbd3a91b7d4445c21d165503a%2Fwebapps_managedIdentities.PNG?alt=media" alt=""><figcaption><p>Managed Identities</p></figcaption></figure>