Remediation scripts/Web Application should only be accessible over HTTPS/PowerShell/Set-WebAppHttpsOnly.ps1

#login-AzAccount
$websites = Get-AzWebApp
foreach($website in $websites){
    Set-AzWebApp -ResourceGroupName $website.ResourceGroup -Name $website.Name  -HttpsOnly $true 
}