Web/Function Application Should Only be Accessible Over HTTPS

Description:

By default, anyone can access your app using HTTP. You can redirect all HTTP requests to the HTTPS port.

Solution: 

To redirect all HTTP traffic to HTTPS, we recommend the following steps:

1. Go to the app service custom domains page

2. In the HTTPS Only toggle, select On.

Open

Reference: 

Full instructions to perform this can be found here at these references:

https://docs.microsoft.com/en-us/azure/app-service/configure-ssl-bindings#enforce-https & https://docs.microsoft.com/en-us/azure/app-service/configure-ssl-certificate