diff --git a/providers/azure/resources/azure.lr b/providers/azure/resources/azure.lr
index 4eba9feb25..7ce81bb554 100644
--- a/providers/azure/resources/azure.lr
+++ b/providers/azure/resources/azure.lr
@@ -1027,6 +1027,8 @@ private azure.subscription.webService.appsite @defaults("id name location") {
   connectionSettings() dict
   // App site stack
   stack() dict
+  // Diagnostic settings for the web app site
+  diagnosticSettings() []azure.subscription.monitorService.diagnosticsetting
 }
 
 // Azure AppSite authentication settings
diff --git a/providers/azure/resources/azure.lr.manifest.yaml b/providers/azure/resources/azure.lr.manifest.yaml
index b072b269d8..621d1f1d27 100644
--- a/providers/azure/resources/azure.lr.manifest.yaml
+++ b/providers/azure/resources/azure.lr.manifest.yaml
@@ -2829,6 +2829,8 @@ resources:
       authenticationSettings: {}
       configuration: {}
       connectionSettings: {}
+      diagnosticSettings:
+        min_mondoo_version: 9.0.0
       id: {}
       identity: {}
       kind: {}
diff --git a/providers/azure/resources/web.go b/providers/azure/resources/web.go
index 257ea0717d..baeca21503 100644
--- a/providers/azure/resources/web.go
+++ b/providers/azure/resources/web.go
@@ -83,6 +83,11 @@ func (a *mqlAzureSubscriptionWebServiceAppsiteconfig) id() (string, error) {
 	return a.Id.Data, nil
 }
 
+func (a *mqlAzureSubscriptionWebServiceAppsite) diagnosticSettings() ([]interface{}, error) {
+	conn := a.MqlRuntime.Connection.(*connection.AzureConnection)
+	return getDiagnosticSettings(a.Id.Data, a.MqlRuntime, conn)
+}
+
 func (a *mqlAzureSubscriptionWebService) apps() ([]interface{}, error) {
 	conn := a.MqlRuntime.Connection.(*connection.AzureConnection)
 	ctx := context.Background()