Description

Detects Azure Function Apps that are only using default host-level keys without any custom function-level keys defined. This configuration may indicate insufficient access control granularity, as it relies solely on the master key rather than implementing function-specific access controls.

Detection Strategy

• Function App has only the default master key configured without any custom function keys defined

• The function_keys property is empty ({})

• The Function App still has a master key present but no function-specific keys