Remediation scripts/Function App should only be accessible over HTTPs/PowerShell/Set-FunctionAppHttpsOnly.ps1 (5 lines of code) (raw):

#login-AzAccount $websites = Get-AzWebApp foreach($website in $websites){ Set-AzWebApp -ResourceGroupName $website.ResourceGroup -Name $website.Name -HttpsOnly $true }