1. Packages
  2. Azure Native v1
  3. API Docs
  4. cdn
  5. Policy
These are the docs for Azure Native v1. We recommenend using the latest version, Azure Native v2.
Azure Native v1 v1.104.0 published on Thursday, Jul 6, 2023 by Pulumi

azure-native.cdn.Policy

Explore with Pulumi AI

azure-native-v1 logo
These are the docs for Azure Native v1. We recommenend using the latest version, Azure Native v2.
Azure Native v1 v1.104.0 published on Thursday, Jul 6, 2023 by Pulumi

    Defines web application firewall policy for Azure CDN. API Version: 2020-09-01.

    Example Usage

    Creates specific policy

    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using AzureNative = Pulumi.AzureNative;
    
    return await Deployment.RunAsync(() => 
    {
        var policy = new AzureNative.Cdn.Policy("policy", new()
        {
            CustomRules = new AzureNative.Cdn.Inputs.CustomRuleListArgs
            {
                Rules = new[]
                {
                    new AzureNative.Cdn.Inputs.CustomRuleArgs
                    {
                        Action = "Block",
                        EnabledState = "Enabled",
                        MatchConditions = new[]
                        {
                            new AzureNative.Cdn.Inputs.MatchConditionArgs
                            {
                                MatchValue = new[]
                                {
                                    "CH",
                                },
                                MatchVariable = "RemoteAddr",
                                NegateCondition = false,
                                Operator = "GeoMatch",
                                Transforms = new[] {},
                            },
                            new AzureNative.Cdn.Inputs.MatchConditionArgs
                            {
                                MatchValue = new[]
                                {
                                    "windows",
                                },
                                MatchVariable = "RequestHeader",
                                NegateCondition = false,
                                Operator = "Contains",
                                Selector = "UserAgent",
                                Transforms = new[] {},
                            },
                            new AzureNative.Cdn.Inputs.MatchConditionArgs
                            {
                                MatchValue = new[]
                                {
                                    "<?php",
                                    "?>",
                                },
                                MatchVariable = "QueryString",
                                NegateCondition = false,
                                Operator = "Contains",
                                Selector = "search",
                                Transforms = new[]
                                {
                                    "UrlDecode",
                                    "Lowercase",
                                },
                            },
                        },
                        Name = "CustomRule1",
                        Priority = 2,
                    },
                },
            },
            Location = "WestUs",
            ManagedRules = new AzureNative.Cdn.Inputs.ManagedRuleSetListArgs
            {
                ManagedRuleSets = new[]
                {
                    new AzureNative.Cdn.Inputs.ManagedRuleSetArgs
                    {
                        RuleGroupOverrides = new[]
                        {
                            new AzureNative.Cdn.Inputs.ManagedRuleGroupOverrideArgs
                            {
                                RuleGroupName = "Group1",
                                Rules = new[]
                                {
                                    new AzureNative.Cdn.Inputs.ManagedRuleOverrideArgs
                                    {
                                        Action = "Redirect",
                                        EnabledState = "Enabled",
                                        RuleId = "GROUP1-0001",
                                    },
                                    new AzureNative.Cdn.Inputs.ManagedRuleOverrideArgs
                                    {
                                        EnabledState = "Disabled",
                                        RuleId = "GROUP1-0002",
                                    },
                                },
                            },
                        },
                        RuleSetType = "DefaultRuleSet",
                        RuleSetVersion = "preview-1.0",
                    },
                },
            },
            PolicyName = "MicrosoftCdnWafPolicy",
            PolicySettings = new AzureNative.Cdn.Inputs.PolicySettingsArgs
            {
                DefaultCustomBlockResponseBody = "PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==",
                DefaultCustomBlockResponseStatusCode = 200,
                DefaultRedirectUrl = "http://www.bing.com",
            },
            RateLimitRules = new AzureNative.Cdn.Inputs.RateLimitRuleListArgs
            {
                Rules = new[]
                {
                    new AzureNative.Cdn.Inputs.RateLimitRuleArgs
                    {
                        Action = "Block",
                        EnabledState = "Enabled",
                        MatchConditions = new[]
                        {
                            new AzureNative.Cdn.Inputs.MatchConditionArgs
                            {
                                MatchValue = new[]
                                {
                                    "192.168.1.0/24",
                                    "10.0.0.0/24",
                                },
                                MatchVariable = "RemoteAddr",
                                NegateCondition = false,
                                Operator = "IPMatch",
                                Transforms = new[] {},
                            },
                        },
                        Name = "RateLimitRule1",
                        Priority = 1,
                        RateLimitDurationInMinutes = 0,
                        RateLimitThreshold = 1000,
                    },
                },
            },
            ResourceGroupName = "rg1",
            Sku = new AzureNative.Cdn.Inputs.SkuArgs
            {
                Name = "Standard_Microsoft",
            },
        });
    
    });
    

    Coming soon!

    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.azurenative.cdn.Policy;
    import com.pulumi.azurenative.cdn.PolicyArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var policy = new Policy("policy", PolicyArgs.builder()        
                .customRules(Map.of("rules", Map.ofEntries(
                    Map.entry("action", "Block"),
                    Map.entry("enabledState", "Enabled"),
                    Map.entry("matchConditions",                 
                        Map.ofEntries(
                            Map.entry("matchValue", "CH"),
                            Map.entry("matchVariable", "RemoteAddr"),
                            Map.entry("negateCondition", false),
                            Map.entry("operator", "GeoMatch"),
                            Map.entry("transforms", )
                        ),
                        Map.ofEntries(
                            Map.entry("matchValue", "windows"),
                            Map.entry("matchVariable", "RequestHeader"),
                            Map.entry("negateCondition", false),
                            Map.entry("operator", "Contains"),
                            Map.entry("selector", "UserAgent"),
                            Map.entry("transforms", )
                        ),
                        Map.ofEntries(
                            Map.entry("matchValue",                         
                                "<?php",
                                "?>"),
                            Map.entry("matchVariable", "QueryString"),
                            Map.entry("negateCondition", false),
                            Map.entry("operator", "Contains"),
                            Map.entry("selector", "search"),
                            Map.entry("transforms",                         
                                "UrlDecode",
                                "Lowercase")
                        )),
                    Map.entry("name", "CustomRule1"),
                    Map.entry("priority", 2)
                )))
                .location("WestUs")
                .managedRules(Map.of("managedRuleSets", Map.ofEntries(
                    Map.entry("ruleGroupOverrides", Map.ofEntries(
                        Map.entry("ruleGroupName", "Group1"),
                        Map.entry("rules",                     
                            Map.ofEntries(
                                Map.entry("action", "Redirect"),
                                Map.entry("enabledState", "Enabled"),
                                Map.entry("ruleId", "GROUP1-0001")
                            ),
                            Map.ofEntries(
                                Map.entry("enabledState", "Disabled"),
                                Map.entry("ruleId", "GROUP1-0002")
                            ))
                    )),
                    Map.entry("ruleSetType", "DefaultRuleSet"),
                    Map.entry("ruleSetVersion", "preview-1.0")
                )))
                .policyName("MicrosoftCdnWafPolicy")
                .policySettings(Map.ofEntries(
                    Map.entry("defaultCustomBlockResponseBody", "PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg=="),
                    Map.entry("defaultCustomBlockResponseStatusCode", 200),
                    Map.entry("defaultRedirectUrl", "http://www.bing.com")
                ))
                .rateLimitRules(Map.of("rules", Map.ofEntries(
                    Map.entry("action", "Block"),
                    Map.entry("enabledState", "Enabled"),
                    Map.entry("matchConditions", Map.ofEntries(
                        Map.entry("matchValue",                     
                            "192.168.1.0/24",
                            "10.0.0.0/24"),
                        Map.entry("matchVariable", "RemoteAddr"),
                        Map.entry("negateCondition", false),
                        Map.entry("operator", "IPMatch"),
                        Map.entry("transforms", )
                    )),
                    Map.entry("name", "RateLimitRule1"),
                    Map.entry("priority", 1),
                    Map.entry("rateLimitDurationInMinutes", 0),
                    Map.entry("rateLimitThreshold", 1000)
                )))
                .resourceGroupName("rg1")
                .sku(Map.of("name", "Standard_Microsoft"))
                .build());
    
        }
    }
    
    import pulumi
    import pulumi_azure_native as azure_native
    
    policy = azure_native.cdn.Policy("policy",
        custom_rules=azure_native.cdn.CustomRuleListResponseArgs(
            rules=[{
                "action": "Block",
                "enabledState": "Enabled",
                "matchConditions": [
                    azure_native.cdn.MatchConditionArgs(
                        match_value=["CH"],
                        match_variable="RemoteAddr",
                        negate_condition=False,
                        operator="GeoMatch",
                        transforms=[],
                    ),
                    azure_native.cdn.MatchConditionArgs(
                        match_value=["windows"],
                        match_variable="RequestHeader",
                        negate_condition=False,
                        operator="Contains",
                        selector="UserAgent",
                        transforms=[],
                    ),
                    azure_native.cdn.MatchConditionArgs(
                        match_value=[
                            "<?php",
                            "?>",
                        ],
                        match_variable="QueryString",
                        negate_condition=False,
                        operator="Contains",
                        selector="search",
                        transforms=[
                            "UrlDecode",
                            "Lowercase",
                        ],
                    ),
                ],
                "name": "CustomRule1",
                "priority": 2,
            }],
        ),
        location="WestUs",
        managed_rules=azure_native.cdn.ManagedRuleSetListResponseArgs(
            managed_rule_sets=[{
                "ruleGroupOverrides": [{
                    "ruleGroupName": "Group1",
                    "rules": [
                        azure_native.cdn.ManagedRuleOverrideArgs(
                            action="Redirect",
                            enabled_state="Enabled",
                            rule_id="GROUP1-0001",
                        ),
                        azure_native.cdn.ManagedRuleOverrideArgs(
                            enabled_state="Disabled",
                            rule_id="GROUP1-0002",
                        ),
                    ],
                }],
                "ruleSetType": "DefaultRuleSet",
                "ruleSetVersion": "preview-1.0",
            }],
        ),
        policy_name="MicrosoftCdnWafPolicy",
        policy_settings=azure_native.cdn.PolicySettingsArgs(
            default_custom_block_response_body="PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==",
            default_custom_block_response_status_code=200,
            default_redirect_url="http://www.bing.com",
        ),
        rate_limit_rules=azure_native.cdn.RateLimitRuleListResponseArgs(
            rules=[{
                "action": "Block",
                "enabledState": "Enabled",
                "matchConditions": [azure_native.cdn.MatchConditionArgs(
                    match_value=[
                        "192.168.1.0/24",
                        "10.0.0.0/24",
                    ],
                    match_variable="RemoteAddr",
                    negate_condition=False,
                    operator="IPMatch",
                    transforms=[],
                )],
                "name": "RateLimitRule1",
                "priority": 1,
                "rateLimitDurationInMinutes": 0,
                "rateLimitThreshold": 1000,
            }],
        ),
        resource_group_name="rg1",
        sku=azure_native.cdn.SkuArgs(
            name="Standard_Microsoft",
        ))
    
    import * as pulumi from "@pulumi/pulumi";
    import * as azure_native from "@pulumi/azure-native";
    
    const policy = new azure_native.cdn.Policy("policy", {
        customRules: {
            rules: [{
                action: "Block",
                enabledState: "Enabled",
                matchConditions: [
                    {
                        matchValue: ["CH"],
                        matchVariable: "RemoteAddr",
                        negateCondition: false,
                        operator: "GeoMatch",
                        transforms: [],
                    },
                    {
                        matchValue: ["windows"],
                        matchVariable: "RequestHeader",
                        negateCondition: false,
                        operator: "Contains",
                        selector: "UserAgent",
                        transforms: [],
                    },
                    {
                        matchValue: [
                            "<?php",
                            "?>",
                        ],
                        matchVariable: "QueryString",
                        negateCondition: false,
                        operator: "Contains",
                        selector: "search",
                        transforms: [
                            "UrlDecode",
                            "Lowercase",
                        ],
                    },
                ],
                name: "CustomRule1",
                priority: 2,
            }],
        },
        location: "WestUs",
        managedRules: {
            managedRuleSets: [{
                ruleGroupOverrides: [{
                    ruleGroupName: "Group1",
                    rules: [
                        {
                            action: "Redirect",
                            enabledState: "Enabled",
                            ruleId: "GROUP1-0001",
                        },
                        {
                            enabledState: "Disabled",
                            ruleId: "GROUP1-0002",
                        },
                    ],
                }],
                ruleSetType: "DefaultRuleSet",
                ruleSetVersion: "preview-1.0",
            }],
        },
        policyName: "MicrosoftCdnWafPolicy",
        policySettings: {
            defaultCustomBlockResponseBody: "PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==",
            defaultCustomBlockResponseStatusCode: 200,
            defaultRedirectUrl: "http://www.bing.com",
        },
        rateLimitRules: {
            rules: [{
                action: "Block",
                enabledState: "Enabled",
                matchConditions: [{
                    matchValue: [
                        "192.168.1.0/24",
                        "10.0.0.0/24",
                    ],
                    matchVariable: "RemoteAddr",
                    negateCondition: false,
                    operator: "IPMatch",
                    transforms: [],
                }],
                name: "RateLimitRule1",
                priority: 1,
                rateLimitDurationInMinutes: 0,
                rateLimitThreshold: 1000,
            }],
        },
        resourceGroupName: "rg1",
        sku: {
            name: "Standard_Microsoft",
        },
    });
    
    resources:
      policy:
        type: azure-native:cdn:Policy
        properties:
          customRules:
            rules:
              - action: Block
                enabledState: Enabled
                matchConditions:
                  - matchValue:
                      - CH
                    matchVariable: RemoteAddr
                    negateCondition: false
                    operator: GeoMatch
                    transforms: []
                  - matchValue:
                      - windows
                    matchVariable: RequestHeader
                    negateCondition: false
                    operator: Contains
                    selector: UserAgent
                    transforms: []
                  - matchValue:
                      - <?php
                      - ?>
                    matchVariable: QueryString
                    negateCondition: false
                    operator: Contains
                    selector: search
                    transforms:
                      - UrlDecode
                      - Lowercase                
                name: CustomRule1
                priority: 2
          location: WestUs
          managedRules:
            managedRuleSets:
              - ruleGroupOverrides:
                  - ruleGroupName: Group1
                    rules:
                      - action: Redirect
                        enabledState: Enabled
                        ruleId: GROUP1-0001
                      - enabledState: Disabled
                        ruleId: GROUP1-0002
                ruleSetType: DefaultRuleSet
                ruleSetVersion: preview-1.0
          policyName: MicrosoftCdnWafPolicy
          policySettings:
            defaultCustomBlockResponseBody: PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==
            defaultCustomBlockResponseStatusCode: 200
            defaultRedirectUrl: http://www.bing.com
          rateLimitRules:
            rules:
              - action: Block
                enabledState: Enabled
                matchConditions:
                  - matchValue:
                      - 192.168.1.0/24
                      - 10.0.0.0/24
                    matchVariable: RemoteAddr
                    negateCondition: false
                    operator: IPMatch
                    transforms: []
                name: RateLimitRule1
                priority: 1
                rateLimitDurationInMinutes: 0
                rateLimitThreshold: 1000
          resourceGroupName: rg1
          sku:
            name: Standard_Microsoft
    

    Create Policy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Policy(name: string, args: PolicyArgs, opts?: CustomResourceOptions);
    @overload
    def Policy(resource_name: str,
               args: PolicyArgs,
               opts: Optional[ResourceOptions] = None)
    
    @overload
    def Policy(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               resource_group_name: Optional[str] = None,
               sku: Optional[SkuArgs] = None,
               custom_rules: Optional[CustomRuleListArgs] = None,
               location: Optional[str] = None,
               managed_rules: Optional[ManagedRuleSetListArgs] = None,
               policy_name: Optional[str] = None,
               policy_settings: Optional[PolicySettingsArgs] = None,
               rate_limit_rules: Optional[RateLimitRuleListArgs] = None,
               tags: Optional[Mapping[str, str]] = None)
    func NewPolicy(ctx *Context, name string, args PolicyArgs, opts ...ResourceOption) (*Policy, error)
    public Policy(string name, PolicyArgs args, CustomResourceOptions? opts = null)
    public Policy(String name, PolicyArgs args)
    public Policy(String name, PolicyArgs args, CustomResourceOptions options)
    
    type: azure-native:cdn:Policy
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args PolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args PolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args PolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args PolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args PolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var azure_nativePolicyResource = new AzureNative.Cdn.Policy("azure-nativePolicyResource", new()
    {
        ResourceGroupName = "string",
        Sku = 
        {
            { "name", "string" },
        },
        CustomRules = 
        {
            { "rules", new[]
            {
                
                {
                    { "action", "string" },
                    { "matchConditions", new[]
                    {
                        
                        {
                            { "matchValue", new[]
                            {
                                "string",
                            } },
                            { "matchVariable", "string" },
                            { "operator", "string" },
                            { "negateCondition", false },
                            { "selector", "string" },
                            { "transforms", new[]
                            {
                                "string",
                            } },
                        },
                    } },
                    { "name", "string" },
                    { "priority", 0 },
                    { "enabledState", "string" },
                },
            } },
        },
        Location = "string",
        ManagedRules = 
        {
            { "managedRuleSets", new[]
            {
                
                {
                    { "ruleSetType", "string" },
                    { "ruleSetVersion", "string" },
                    { "anomalyScore", 0 },
                    { "ruleGroupOverrides", new[]
                    {
                        
                        {
                            { "ruleGroupName", "string" },
                            { "rules", new[]
                            {
                                
                                {
                                    { "ruleId", "string" },
                                    { "action", "string" },
                                    { "enabledState", "string" },
                                },
                            } },
                        },
                    } },
                },
            } },
        },
        PolicyName = "string",
        PolicySettings = 
        {
            { "defaultCustomBlockResponseBody", "string" },
            { "defaultCustomBlockResponseStatusCode", 0 },
            { "defaultRedirectUrl", "string" },
            { "enabledState", "string" },
            { "mode", "string" },
        },
        RateLimitRules = 
        {
            { "rules", new[]
            {
                
                {
                    { "action", "string" },
                    { "matchConditions", new[]
                    {
                        
                        {
                            { "matchValue", new[]
                            {
                                "string",
                            } },
                            { "matchVariable", "string" },
                            { "operator", "string" },
                            { "negateCondition", false },
                            { "selector", "string" },
                            { "transforms", new[]
                            {
                                "string",
                            } },
                        },
                    } },
                    { "name", "string" },
                    { "priority", 0 },
                    { "rateLimitDurationInMinutes", 0 },
                    { "rateLimitThreshold", 0 },
                    { "enabledState", "string" },
                },
            } },
        },
        Tags = 
        {
            { "string", "string" },
        },
    });
    
    example, err := cdn.NewPolicy(ctx, "azure-nativePolicyResource", &cdn.PolicyArgs{
    	ResourceGroupName: "string",
    	Sku: map[string]interface{}{
    		"name": "string",
    	},
    	CustomRules: map[string]interface{}{
    		"rules": []map[string]interface{}{
    			map[string]interface{}{
    				"action": "string",
    				"matchConditions": []map[string]interface{}{
    					map[string]interface{}{
    						"matchValue": []string{
    							"string",
    						},
    						"matchVariable":   "string",
    						"operator":        "string",
    						"negateCondition": false,
    						"selector":        "string",
    						"transforms": []string{
    							"string",
    						},
    					},
    				},
    				"name":         "string",
    				"priority":     0,
    				"enabledState": "string",
    			},
    		},
    	},
    	Location: "string",
    	ManagedRules: map[string]interface{}{
    		"managedRuleSets": []map[string]interface{}{
    			map[string]interface{}{
    				"ruleSetType":    "string",
    				"ruleSetVersion": "string",
    				"anomalyScore":   0,
    				"ruleGroupOverrides": []map[string]interface{}{
    					map[string]interface{}{
    						"ruleGroupName": "string",
    						"rules": []map[string]interface{}{
    							map[string]interface{}{
    								"ruleId":       "string",
    								"action":       "string",
    								"enabledState": "string",
    							},
    						},
    					},
    				},
    			},
    		},
    	},
    	PolicyName: "string",
    	PolicySettings: map[string]interface{}{
    		"defaultCustomBlockResponseBody":       "string",
    		"defaultCustomBlockResponseStatusCode": 0,
    		"defaultRedirectUrl":                   "string",
    		"enabledState":                         "string",
    		"mode":                                 "string",
    	},
    	RateLimitRules: map[string]interface{}{
    		"rules": []map[string]interface{}{
    			map[string]interface{}{
    				"action": "string",
    				"matchConditions": []map[string]interface{}{
    					map[string]interface{}{
    						"matchValue": []string{
    							"string",
    						},
    						"matchVariable":   "string",
    						"operator":        "string",
    						"negateCondition": false,
    						"selector":        "string",
    						"transforms": []string{
    							"string",
    						},
    					},
    				},
    				"name":                       "string",
    				"priority":                   0,
    				"rateLimitDurationInMinutes": 0,
    				"rateLimitThreshold":         0,
    				"enabledState":               "string",
    			},
    		},
    	},
    	Tags: map[string]interface{}{
    		"string": "string",
    	},
    })
    
    var azure_nativePolicyResource = new Policy("azure-nativePolicyResource", PolicyArgs.builder()
        .resourceGroupName("string")
        .sku(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
        .customRules(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
        .location("string")
        .managedRules(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
        .policyName("string")
        .policySettings(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
        .rateLimitRules(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
        .tags(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
        .build());
    
    azure_native_policy_resource = azure_native.cdn.Policy("azure-nativePolicyResource",
        resource_group_name=string,
        sku={
            name: string,
        },
        custom_rules={
            rules: [{
                action: string,
                matchConditions: [{
                    matchValue: [string],
                    matchVariable: string,
                    operator: string,
                    negateCondition: False,
                    selector: string,
                    transforms: [string],
                }],
                name: string,
                priority: 0,
                enabledState: string,
            }],
        },
        location=string,
        managed_rules={
            managedRuleSets: [{
                ruleSetType: string,
                ruleSetVersion: string,
                anomalyScore: 0,
                ruleGroupOverrides: [{
                    ruleGroupName: string,
                    rules: [{
                        ruleId: string,
                        action: string,
                        enabledState: string,
                    }],
                }],
            }],
        },
        policy_name=string,
        policy_settings={
            defaultCustomBlockResponseBody: string,
            defaultCustomBlockResponseStatusCode: 0,
            defaultRedirectUrl: string,
            enabledState: string,
            mode: string,
        },
        rate_limit_rules={
            rules: [{
                action: string,
                matchConditions: [{
                    matchValue: [string],
                    matchVariable: string,
                    operator: string,
                    negateCondition: False,
                    selector: string,
                    transforms: [string],
                }],
                name: string,
                priority: 0,
                rateLimitDurationInMinutes: 0,
                rateLimitThreshold: 0,
                enabledState: string,
            }],
        },
        tags={
            string: string,
        })
    
    const azure_nativePolicyResource = new azure_native.cdn.Policy("azure-nativePolicyResource", {
        resourceGroupName: "string",
        sku: {
            name: "string",
        },
        customRules: {
            rules: [{
                action: "string",
                matchConditions: [{
                    matchValue: ["string"],
                    matchVariable: "string",
                    operator: "string",
                    negateCondition: false,
                    selector: "string",
                    transforms: ["string"],
                }],
                name: "string",
                priority: 0,
                enabledState: "string",
            }],
        },
        location: "string",
        managedRules: {
            managedRuleSets: [{
                ruleSetType: "string",
                ruleSetVersion: "string",
                anomalyScore: 0,
                ruleGroupOverrides: [{
                    ruleGroupName: "string",
                    rules: [{
                        ruleId: "string",
                        action: "string",
                        enabledState: "string",
                    }],
                }],
            }],
        },
        policyName: "string",
        policySettings: {
            defaultCustomBlockResponseBody: "string",
            defaultCustomBlockResponseStatusCode: 0,
            defaultRedirectUrl: "string",
            enabledState: "string",
            mode: "string",
        },
        rateLimitRules: {
            rules: [{
                action: "string",
                matchConditions: [{
                    matchValue: ["string"],
                    matchVariable: "string",
                    operator: "string",
                    negateCondition: false,
                    selector: "string",
                    transforms: ["string"],
                }],
                name: "string",
                priority: 0,
                rateLimitDurationInMinutes: 0,
                rateLimitThreshold: 0,
                enabledState: "string",
            }],
        },
        tags: {
            string: "string",
        },
    });
    
    type: azure-native:cdn:Policy
    properties:
        customRules:
            rules:
                - action: string
                  enabledState: string
                  matchConditions:
                    - matchValue:
                        - string
                      matchVariable: string
                      negateCondition: false
                      operator: string
                      selector: string
                      transforms:
                        - string
                  name: string
                  priority: 0
        location: string
        managedRules:
            managedRuleSets:
                - anomalyScore: 0
                  ruleGroupOverrides:
                    - ruleGroupName: string
                      rules:
                        - action: string
                          enabledState: string
                          ruleId: string
                  ruleSetType: string
                  ruleSetVersion: string
        policyName: string
        policySettings:
            defaultCustomBlockResponseBody: string
            defaultCustomBlockResponseStatusCode: 0
            defaultRedirectUrl: string
            enabledState: string
            mode: string
        rateLimitRules:
            rules:
                - action: string
                  enabledState: string
                  matchConditions:
                    - matchValue:
                        - string
                      matchVariable: string
                      negateCondition: false
                      operator: string
                      selector: string
                      transforms:
                        - string
                  name: string
                  priority: 0
                  rateLimitDurationInMinutes: 0
                  rateLimitThreshold: 0
        resourceGroupName: string
        sku:
            name: string
        tags:
            string: string
    

    Policy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The Policy resource accepts the following input properties:

    ResourceGroupName string
    Name of the Resource group within the Azure subscription.
    Sku Pulumi.AzureNative.Cdn.Inputs.Sku
    The pricing tier (defines a CDN provider, feature list and rate) of the CdnWebApplicationFirewallPolicy.
    CustomRules Pulumi.AzureNative.Cdn.Inputs.CustomRuleList
    Describes custom rules inside the policy.
    Location string
    Resource location.
    ManagedRules Pulumi.AzureNative.Cdn.Inputs.ManagedRuleSetList
    Describes managed rules inside the policy.
    PolicyName string
    The name of the CdnWebApplicationFirewallPolicy.
    PolicySettings Pulumi.AzureNative.Cdn.Inputs.PolicySettings
    Describes policySettings for policy
    RateLimitRules Pulumi.AzureNative.Cdn.Inputs.RateLimitRuleList
    Describes rate limit rules inside the policy.
    Tags Dictionary<string, string>
    Resource tags.
    ResourceGroupName string
    Name of the Resource group within the Azure subscription.
    Sku SkuArgs
    The pricing tier (defines a CDN provider, feature list and rate) of the CdnWebApplicationFirewallPolicy.
    CustomRules CustomRuleListArgs
    Describes custom rules inside the policy.
    Location string
    Resource location.
    ManagedRules ManagedRuleSetListArgs
    Describes managed rules inside the policy.
    PolicyName string
    The name of the CdnWebApplicationFirewallPolicy.
    PolicySettings PolicySettingsArgs
    Describes policySettings for policy
    RateLimitRules RateLimitRuleListArgs
    Describes rate limit rules inside the policy.
    Tags map[string]string
    Resource tags.
    resourceGroupName String
    Name of the Resource group within the Azure subscription.
    sku Sku
    The pricing tier (defines a CDN provider, feature list and rate) of the CdnWebApplicationFirewallPolicy.
    customRules CustomRuleList
    Describes custom rules inside the policy.
    location String
    Resource location.
    managedRules ManagedRuleSetList
    Describes managed rules inside the policy.
    policyName String
    The name of the CdnWebApplicationFirewallPolicy.
    policySettings PolicySettings
    Describes policySettings for policy
    rateLimitRules RateLimitRuleList
    Describes rate limit rules inside the policy.
    tags Map<String,String>
    Resource tags.
    resourceGroupName string
    Name of the Resource group within the Azure subscription.
    sku Sku
    The pricing tier (defines a CDN provider, feature list and rate) of the CdnWebApplicationFirewallPolicy.
    customRules CustomRuleList
    Describes custom rules inside the policy.
    location string
    Resource location.
    managedRules ManagedRuleSetList
    Describes managed rules inside the policy.
    policyName string
    The name of the CdnWebApplicationFirewallPolicy.
    policySettings PolicySettings
    Describes policySettings for policy
    rateLimitRules RateLimitRuleList
    Describes rate limit rules inside the policy.
    tags {[key: string]: string}
    Resource tags.
    resource_group_name str
    Name of the Resource group within the Azure subscription.
    sku SkuArgs
    The pricing tier (defines a CDN provider, feature list and rate) of the CdnWebApplicationFirewallPolicy.
    custom_rules CustomRuleListArgs
    Describes custom rules inside the policy.
    location str
    Resource location.
    managed_rules ManagedRuleSetListArgs
    Describes managed rules inside the policy.
    policy_name str
    The name of the CdnWebApplicationFirewallPolicy.
    policy_settings PolicySettingsArgs
    Describes policySettings for policy
    rate_limit_rules RateLimitRuleListArgs
    Describes rate limit rules inside the policy.
    tags Mapping[str, str]
    Resource tags.
    resourceGroupName String
    Name of the Resource group within the Azure subscription.
    sku Property Map
    The pricing tier (defines a CDN provider, feature list and rate) of the CdnWebApplicationFirewallPolicy.
    customRules Property Map
    Describes custom rules inside the policy.
    location String
    Resource location.
    managedRules Property Map
    Describes managed rules inside the policy.
    policyName String
    The name of the CdnWebApplicationFirewallPolicy.
    policySettings Property Map
    Describes policySettings for policy
    rateLimitRules Property Map
    Describes rate limit rules inside the policy.
    tags Map<String>
    Resource tags.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Policy resource produces the following output properties:

    EndpointLinks List<Pulumi.AzureNative.Cdn.Outputs.CdnEndpointResponse>
    Describes Azure CDN endpoints associated with this Web Application Firewall policy.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Resource name.
    ProvisioningState string
    Provisioning state of the WebApplicationFirewallPolicy.
    ResourceState string
    SystemData Pulumi.AzureNative.Cdn.Outputs.SystemDataResponse
    Read only system data
    Type string
    Resource type.
    Etag string
    Gets a unique read-only string that changes whenever the resource is updated.
    EndpointLinks []CdnEndpointResponse
    Describes Azure CDN endpoints associated with this Web Application Firewall policy.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Resource name.
    ProvisioningState string
    Provisioning state of the WebApplicationFirewallPolicy.
    ResourceState string
    SystemData SystemDataResponse
    Read only system data
    Type string
    Resource type.
    Etag string
    Gets a unique read-only string that changes whenever the resource is updated.
    endpointLinks List<CdnEndpointResponse>
    Describes Azure CDN endpoints associated with this Web Application Firewall policy.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Resource name.
    provisioningState String
    Provisioning state of the WebApplicationFirewallPolicy.
    resourceState String
    systemData SystemDataResponse
    Read only system data
    type String
    Resource type.
    etag String
    Gets a unique read-only string that changes whenever the resource is updated.
    endpointLinks CdnEndpointResponse[]
    Describes Azure CDN endpoints associated with this Web Application Firewall policy.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    Resource name.
    provisioningState string
    Provisioning state of the WebApplicationFirewallPolicy.
    resourceState string
    systemData SystemDataResponse
    Read only system data
    type string
    Resource type.
    etag string
    Gets a unique read-only string that changes whenever the resource is updated.
    endpoint_links Sequence[CdnEndpointResponse]
    Describes Azure CDN endpoints associated with this Web Application Firewall policy.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    Resource name.
    provisioning_state str
    Provisioning state of the WebApplicationFirewallPolicy.
    resource_state str
    system_data SystemDataResponse
    Read only system data
    type str
    Resource type.
    etag str
    Gets a unique read-only string that changes whenever the resource is updated.
    endpointLinks List<Property Map>
    Describes Azure CDN endpoints associated with this Web Application Firewall policy.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Resource name.
    provisioningState String
    Provisioning state of the WebApplicationFirewallPolicy.
    resourceState String
    systemData Property Map
    Read only system data
    type String
    Resource type.
    etag String
    Gets a unique read-only string that changes whenever the resource is updated.

    Supporting Types

    ActionType, ActionTypeArgs

    Allow
    Allow
    Block
    Block
    Log
    Log
    Redirect
    Redirect
    ActionTypeAllow
    Allow
    ActionTypeBlock
    Block
    ActionTypeLog
    Log
    ActionTypeRedirect
    Redirect
    Allow
    Allow
    Block
    Block
    Log
    Log
    Redirect
    Redirect
    Allow
    Allow
    Block
    Block
    Log
    Log
    Redirect
    Redirect
    ALLOW
    Allow
    BLOCK
    Block
    LOG
    Log
    REDIRECT
    Redirect
    "Allow"
    Allow
    "Block"
    Block
    "Log"
    Log
    "Redirect"
    Redirect

    CdnEndpointResponse, CdnEndpointResponseArgs

    Id string
    ARM Resource ID string.
    Id string
    ARM Resource ID string.
    id String
    ARM Resource ID string.
    id string
    ARM Resource ID string.
    id str
    ARM Resource ID string.
    id String
    ARM Resource ID string.

    CustomRule, CustomRuleArgs

    Action string | Pulumi.AzureNative.Cdn.ActionType
    Describes what action to be applied when rule matches
    MatchConditions List<Pulumi.AzureNative.Cdn.Inputs.MatchCondition>
    List of match conditions.
    Name string
    Defines the name of the custom rule
    Priority int
    Defines in what order this rule be evaluated in the overall list of custom rules
    EnabledState string | Pulumi.AzureNative.Cdn.CustomRuleEnabledState
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    Action string | ActionType
    Describes what action to be applied when rule matches
    MatchConditions []MatchCondition
    List of match conditions.
    Name string
    Defines the name of the custom rule
    Priority int
    Defines in what order this rule be evaluated in the overall list of custom rules
    EnabledState string | CustomRuleEnabledState
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    action String | ActionType
    Describes what action to be applied when rule matches
    matchConditions List<MatchCondition>
    List of match conditions.
    name String
    Defines the name of the custom rule
    priority Integer
    Defines in what order this rule be evaluated in the overall list of custom rules
    enabledState String | CustomRuleEnabledState
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    action string | ActionType
    Describes what action to be applied when rule matches
    matchConditions MatchCondition[]
    List of match conditions.
    name string
    Defines the name of the custom rule
    priority number
    Defines in what order this rule be evaluated in the overall list of custom rules
    enabledState string | CustomRuleEnabledState
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    action str | ActionType
    Describes what action to be applied when rule matches
    match_conditions Sequence[MatchCondition]
    List of match conditions.
    name str
    Defines the name of the custom rule
    priority int
    Defines in what order this rule be evaluated in the overall list of custom rules
    enabled_state str | CustomRuleEnabledState
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    action String | "Allow" | "Block" | "Log" | "Redirect"
    Describes what action to be applied when rule matches
    matchConditions List<Property Map>
    List of match conditions.
    name String
    Defines the name of the custom rule
    priority Number
    Defines in what order this rule be evaluated in the overall list of custom rules
    enabledState String | "Disabled" | "Enabled"
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

    CustomRuleEnabledState, CustomRuleEnabledStateArgs

    Disabled
    Disabled
    Enabled
    Enabled
    CustomRuleEnabledStateDisabled
    Disabled
    CustomRuleEnabledStateEnabled
    Enabled
    Disabled
    Disabled
    Enabled
    Enabled
    Disabled
    Disabled
    Enabled
    Enabled
    DISABLED
    Disabled
    ENABLED
    Enabled
    "Disabled"
    Disabled
    "Enabled"
    Enabled

    CustomRuleList, CustomRuleListArgs

    Rules []CustomRule
    List of rules
    rules List<CustomRule>
    List of rules
    rules CustomRule[]
    List of rules

    CustomRuleListResponse, CustomRuleListResponseArgs

    CustomRuleResponse, CustomRuleResponseArgs

    Action string
    Describes what action to be applied when rule matches
    MatchConditions List<Pulumi.AzureNative.Cdn.Inputs.MatchConditionResponse>
    List of match conditions.
    Name string
    Defines the name of the custom rule
    Priority int
    Defines in what order this rule be evaluated in the overall list of custom rules
    EnabledState string
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    Action string
    Describes what action to be applied when rule matches
    MatchConditions []MatchConditionResponse
    List of match conditions.
    Name string
    Defines the name of the custom rule
    Priority int
    Defines in what order this rule be evaluated in the overall list of custom rules
    EnabledState string
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    action String
    Describes what action to be applied when rule matches
    matchConditions List<MatchConditionResponse>
    List of match conditions.
    name String
    Defines the name of the custom rule
    priority Integer
    Defines in what order this rule be evaluated in the overall list of custom rules
    enabledState String
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    action string
    Describes what action to be applied when rule matches
    matchConditions MatchConditionResponse[]
    List of match conditions.
    name string
    Defines the name of the custom rule
    priority number
    Defines in what order this rule be evaluated in the overall list of custom rules
    enabledState string
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    action str
    Describes what action to be applied when rule matches
    match_conditions Sequence[MatchConditionResponse]
    List of match conditions.
    name str
    Defines the name of the custom rule
    priority int
    Defines in what order this rule be evaluated in the overall list of custom rules
    enabled_state str
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    action String
    Describes what action to be applied when rule matches
    matchConditions List<Property Map>
    List of match conditions.
    name String
    Defines the name of the custom rule
    priority Number
    Defines in what order this rule be evaluated in the overall list of custom rules
    enabledState String
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

    ManagedRuleEnabledState, ManagedRuleEnabledStateArgs

    Disabled
    Disabled
    Enabled
    Enabled
    ManagedRuleEnabledStateDisabled
    Disabled
    ManagedRuleEnabledStateEnabled
    Enabled
    Disabled
    Disabled
    Enabled
    Enabled
    Disabled
    Disabled
    Enabled
    Enabled
    DISABLED
    Disabled
    ENABLED
    Enabled
    "Disabled"
    Disabled
    "Enabled"
    Enabled

    ManagedRuleGroupOverride, ManagedRuleGroupOverrideArgs

    RuleGroupName string
    Describes the managed rule group within the rule set to override
    Rules List<Pulumi.AzureNative.Cdn.Inputs.ManagedRuleOverride>
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    RuleGroupName string
    Describes the managed rule group within the rule set to override
    Rules []ManagedRuleOverride
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    ruleGroupName String
    Describes the managed rule group within the rule set to override
    rules List<ManagedRuleOverride>
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    ruleGroupName string
    Describes the managed rule group within the rule set to override
    rules ManagedRuleOverride[]
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    rule_group_name str
    Describes the managed rule group within the rule set to override
    rules Sequence[ManagedRuleOverride]
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    ruleGroupName String
    Describes the managed rule group within the rule set to override
    rules List<Property Map>
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.

    ManagedRuleGroupOverrideResponse, ManagedRuleGroupOverrideResponseArgs

    RuleGroupName string
    Describes the managed rule group within the rule set to override
    Rules List<Pulumi.AzureNative.Cdn.Inputs.ManagedRuleOverrideResponse>
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    RuleGroupName string
    Describes the managed rule group within the rule set to override
    Rules []ManagedRuleOverrideResponse
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    ruleGroupName String
    Describes the managed rule group within the rule set to override
    rules List<ManagedRuleOverrideResponse>
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    ruleGroupName string
    Describes the managed rule group within the rule set to override
    rules ManagedRuleOverrideResponse[]
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    rule_group_name str
    Describes the managed rule group within the rule set to override
    rules Sequence[ManagedRuleOverrideResponse]
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    ruleGroupName String
    Describes the managed rule group within the rule set to override
    rules List<Property Map>
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.

    ManagedRuleOverride, ManagedRuleOverrideArgs

    RuleId string
    Identifier for the managed rule.
    Action string | Pulumi.AzureNative.Cdn.ActionType
    Describes the override action to be applied when rule matches.
    EnabledState string | Pulumi.AzureNative.Cdn.ManagedRuleEnabledState
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    RuleId string
    Identifier for the managed rule.
    Action string | ActionType
    Describes the override action to be applied when rule matches.
    EnabledState string | ManagedRuleEnabledState
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    ruleId String
    Identifier for the managed rule.
    action String | ActionType
    Describes the override action to be applied when rule matches.
    enabledState String | ManagedRuleEnabledState
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    ruleId string
    Identifier for the managed rule.
    action string | ActionType
    Describes the override action to be applied when rule matches.
    enabledState string | ManagedRuleEnabledState
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    rule_id str
    Identifier for the managed rule.
    action str | ActionType
    Describes the override action to be applied when rule matches.
    enabled_state str | ManagedRuleEnabledState
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    ruleId String
    Identifier for the managed rule.
    action String | "Allow" | "Block" | "Log" | "Redirect"
    Describes the override action to be applied when rule matches.
    enabledState String | "Disabled" | "Enabled"
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

    ManagedRuleOverrideResponse, ManagedRuleOverrideResponseArgs

    RuleId string
    Identifier for the managed rule.
    Action string
    Describes the override action to be applied when rule matches.
    EnabledState string
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    RuleId string
    Identifier for the managed rule.
    Action string
    Describes the override action to be applied when rule matches.
    EnabledState string
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    ruleId String
    Identifier for the managed rule.
    action String
    Describes the override action to be applied when rule matches.
    enabledState String
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    ruleId string
    Identifier for the managed rule.
    action string
    Describes the override action to be applied when rule matches.
    enabledState string
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    rule_id str
    Identifier for the managed rule.
    action str
    Describes the override action to be applied when rule matches.
    enabled_state str
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    ruleId String
    Identifier for the managed rule.
    action String
    Describes the override action to be applied when rule matches.
    enabledState String
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

    ManagedRuleSet, ManagedRuleSetArgs

    RuleSetType string
    Defines the rule set type to use.
    RuleSetVersion string
    Defines the version of the rule set to use.
    AnomalyScore int
    Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
    RuleGroupOverrides List<Pulumi.AzureNative.Cdn.Inputs.ManagedRuleGroupOverride>
    Defines the rule overrides to apply to the rule set.
    RuleSetType string
    Defines the rule set type to use.
    RuleSetVersion string
    Defines the version of the rule set to use.
    AnomalyScore int
    Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
    RuleGroupOverrides []ManagedRuleGroupOverride
    Defines the rule overrides to apply to the rule set.
    ruleSetType String
    Defines the rule set type to use.
    ruleSetVersion String
    Defines the version of the rule set to use.
    anomalyScore Integer
    Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
    ruleGroupOverrides List<ManagedRuleGroupOverride>
    Defines the rule overrides to apply to the rule set.
    ruleSetType string
    Defines the rule set type to use.
    ruleSetVersion string
    Defines the version of the rule set to use.
    anomalyScore number
    Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
    ruleGroupOverrides ManagedRuleGroupOverride[]
    Defines the rule overrides to apply to the rule set.
    rule_set_type str
    Defines the rule set type to use.
    rule_set_version str
    Defines the version of the rule set to use.
    anomaly_score int
    Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
    rule_group_overrides Sequence[ManagedRuleGroupOverride]
    Defines the rule overrides to apply to the rule set.
    ruleSetType String
    Defines the rule set type to use.
    ruleSetVersion String
    Defines the version of the rule set to use.
    anomalyScore Number
    Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
    ruleGroupOverrides List<Property Map>
    Defines the rule overrides to apply to the rule set.

    ManagedRuleSetList, ManagedRuleSetListArgs

    ManagedRuleSetListResponse, ManagedRuleSetListResponseArgs

    ManagedRuleSetResponse, ManagedRuleSetResponseArgs

    RuleSetType string
    Defines the rule set type to use.
    RuleSetVersion string
    Defines the version of the rule set to use.
    AnomalyScore int
    Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
    RuleGroupOverrides List<Pulumi.AzureNative.Cdn.Inputs.ManagedRuleGroupOverrideResponse>
    Defines the rule overrides to apply to the rule set.
    RuleSetType string
    Defines the rule set type to use.
    RuleSetVersion string
    Defines the version of the rule set to use.
    AnomalyScore int
    Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
    RuleGroupOverrides []ManagedRuleGroupOverrideResponse
    Defines the rule overrides to apply to the rule set.
    ruleSetType String
    Defines the rule set type to use.
    ruleSetVersion String
    Defines the version of the rule set to use.
    anomalyScore Integer
    Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
    ruleGroupOverrides List<ManagedRuleGroupOverrideResponse>
    Defines the rule overrides to apply to the rule set.
    ruleSetType string
    Defines the rule set type to use.
    ruleSetVersion string
    Defines the version of the rule set to use.
    anomalyScore number
    Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
    ruleGroupOverrides ManagedRuleGroupOverrideResponse[]
    Defines the rule overrides to apply to the rule set.
    rule_set_type str
    Defines the rule set type to use.
    rule_set_version str
    Defines the version of the rule set to use.
    anomaly_score int
    Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
    rule_group_overrides Sequence[ManagedRuleGroupOverrideResponse]
    Defines the rule overrides to apply to the rule set.
    ruleSetType String
    Defines the rule set type to use.
    ruleSetVersion String
    Defines the version of the rule set to use.
    anomalyScore Number
    Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
    ruleGroupOverrides List<Property Map>
    Defines the rule overrides to apply to the rule set.

    MatchCondition, MatchConditionArgs

    MatchValue List<string>
    List of possible match values.
    MatchVariable string | Pulumi.AzureNative.Cdn.MatchVariable
    Match variable to compare against.
    Operator string | Pulumi.AzureNative.Cdn.Operator
    Describes operator to be matched
    NegateCondition bool
    Describes if the result of this condition should be negated.
    Selector string
    Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
    Transforms List<Union<string, Pulumi.AzureNative.Cdn.TransformType>>
    List of transforms.
    MatchValue []string
    List of possible match values.
    MatchVariable string | MatchVariable
    Match variable to compare against.
    Operator string | Operator
    Describes operator to be matched
    NegateCondition bool
    Describes if the result of this condition should be negated.
    Selector string
    Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
    Transforms []string
    List of transforms.
    matchValue List<String>
    List of possible match values.
    matchVariable String | MatchVariable
    Match variable to compare against.
    operator String | Operator
    Describes operator to be matched
    negateCondition Boolean
    Describes if the result of this condition should be negated.
    selector String
    Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
    transforms List<Either<String,TransformType>>
    List of transforms.
    matchValue string[]
    List of possible match values.
    matchVariable string | MatchVariable
    Match variable to compare against.
    operator string | Operator
    Describes operator to be matched
    negateCondition boolean
    Describes if the result of this condition should be negated.
    selector string
    Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
    transforms (string | TransformType)[]
    List of transforms.
    match_value Sequence[str]
    List of possible match values.
    match_variable str | MatchVariable
    Match variable to compare against.
    operator str | Operator
    Describes operator to be matched
    negate_condition bool
    Describes if the result of this condition should be negated.
    selector str
    Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
    transforms Sequence[Union[str, TransformType]]
    List of transforms.
    matchValue List<String>
    List of possible match values.
    matchVariable String | "RemoteAddress" | "RequestMethod" | "QueryString" | "PostArgs" | "RequestUri" | "RequestHeader" | "RequestBody" | "RequestScheme" | "UrlPath" | "UrlFileExtension" | "UrlFileName" | "HttpVersion" | "Cookies" | "IsDevice"
    Match variable to compare against.
    operator String | "Any" | "IPMatch" | "GeoMatch" | "Equal" | "Contains" | "LessThan" | "GreaterThan" | "LessThanOrEqual" | "GreaterThanOrEqual" | "BeginsWith" | "EndsWith" | "RegEx"
    Describes operator to be matched
    negateCondition Boolean
    Describes if the result of this condition should be negated.
    selector String
    Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
    transforms List<String | "Lowercase" | "Uppercase" | "Trim" | "UrlDecode" | "UrlEncode" | "RemoveNulls">
    List of transforms.

    MatchConditionResponse, MatchConditionResponseArgs

    MatchValue List<string>
    List of possible match values.
    MatchVariable string
    Match variable to compare against.
    Operator string
    Describes operator to be matched
    NegateCondition bool
    Describes if the result of this condition should be negated.
    Selector string
    Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
    Transforms List<string>
    List of transforms.
    MatchValue []string
    List of possible match values.
    MatchVariable string
    Match variable to compare against.
    Operator string
    Describes operator to be matched
    NegateCondition bool
    Describes if the result of this condition should be negated.
    Selector string
    Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
    Transforms []string
    List of transforms.
    matchValue List<String>
    List of possible match values.
    matchVariable String
    Match variable to compare against.
    operator String
    Describes operator to be matched
    negateCondition Boolean
    Describes if the result of this condition should be negated.
    selector String
    Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
    transforms List<String>
    List of transforms.
    matchValue string[]
    List of possible match values.
    matchVariable string
    Match variable to compare against.
    operator string
    Describes operator to be matched
    negateCondition boolean
    Describes if the result of this condition should be negated.
    selector string
    Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
    transforms string[]
    List of transforms.
    match_value Sequence[str]
    List of possible match values.
    match_variable str
    Match variable to compare against.
    operator str
    Describes operator to be matched
    negate_condition bool
    Describes if the result of this condition should be negated.
    selector str
    Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
    transforms Sequence[str]
    List of transforms.
    matchValue List<String>
    List of possible match values.
    matchVariable String
    Match variable to compare against.
    operator String
    Describes operator to be matched
    negateCondition Boolean
    Describes if the result of this condition should be negated.
    selector String
    Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
    transforms List<String>
    List of transforms.

    MatchVariable, MatchVariableArgs

    RemoteAddress
    RemoteAddress
    RequestMethod
    RequestMethod
    QueryString
    QueryString
    PostArgs
    PostArgs
    RequestUri
    RequestUri
    RequestHeader
    RequestHeader
    RequestBody
    RequestBody
    RequestScheme
    RequestScheme
    UrlPath
    UrlPath
    UrlFileExtension
    UrlFileExtension
    UrlFileName
    UrlFileName
    HttpVersion
    HttpVersion
    Cookies
    Cookies
    IsDevice
    IsDevice
    MatchVariableRemoteAddress
    RemoteAddress
    MatchVariableRequestMethod
    RequestMethod
    MatchVariableQueryString
    QueryString
    MatchVariablePostArgs
    PostArgs
    MatchVariableRequestUri
    RequestUri
    MatchVariableRequestHeader
    RequestHeader
    MatchVariableRequestBody
    RequestBody
    MatchVariableRequestScheme
    RequestScheme
    MatchVariableUrlPath
    UrlPath
    MatchVariableUrlFileExtension
    UrlFileExtension
    MatchVariableUrlFileName
    UrlFileName
    MatchVariableHttpVersion
    HttpVersion
    MatchVariableCookies
    Cookies
    MatchVariableIsDevice
    IsDevice
    RemoteAddress
    RemoteAddress
    RequestMethod
    RequestMethod
    QueryString
    QueryString
    PostArgs
    PostArgs
    RequestUri
    RequestUri
    RequestHeader
    RequestHeader
    RequestBody
    RequestBody
    RequestScheme
    RequestScheme
    UrlPath
    UrlPath
    UrlFileExtension
    UrlFileExtension
    UrlFileName
    UrlFileName
    HttpVersion
    HttpVersion
    Cookies
    Cookies
    IsDevice
    IsDevice
    RemoteAddress
    RemoteAddress
    RequestMethod
    RequestMethod
    QueryString
    QueryString
    PostArgs
    PostArgs
    RequestUri
    RequestUri
    RequestHeader
    RequestHeader
    RequestBody
    RequestBody
    RequestScheme
    RequestScheme
    UrlPath
    UrlPath
    UrlFileExtension
    UrlFileExtension
    UrlFileName
    UrlFileName
    HttpVersion
    HttpVersion
    Cookies
    Cookies
    IsDevice
    IsDevice
    REMOTE_ADDRESS
    RemoteAddress
    REQUEST_METHOD
    RequestMethod
    QUERY_STRING
    QueryString
    POST_ARGS
    PostArgs
    REQUEST_URI
    RequestUri
    REQUEST_HEADER
    RequestHeader
    REQUEST_BODY
    RequestBody
    REQUEST_SCHEME
    RequestScheme
    URL_PATH
    UrlPath
    URL_FILE_EXTENSION
    UrlFileExtension
    URL_FILE_NAME
    UrlFileName
    HTTP_VERSION
    HttpVersion
    COOKIES
    Cookies
    IS_DEVICE
    IsDevice
    "RemoteAddress"
    RemoteAddress
    "RequestMethod"
    RequestMethod
    "QueryString"
    QueryString
    "PostArgs"
    PostArgs
    "RequestUri"
    RequestUri
    "RequestHeader"
    RequestHeader
    "RequestBody"
    RequestBody
    "RequestScheme"
    RequestScheme
    "UrlPath"
    UrlPath
    "UrlFileExtension"
    UrlFileExtension
    "UrlFileName"
    UrlFileName
    "HttpVersion"
    HttpVersion
    "Cookies"
    Cookies
    "IsDevice"
    IsDevice

    Operator, OperatorArgs

    Any
    Any
    IPMatch
    IPMatch
    GeoMatch
    GeoMatch
    Equal
    Equal
    Contains
    Contains
    LessThan
    LessThan
    GreaterThan
    GreaterThan
    LessThanOrEqual
    LessThanOrEqual
    GreaterThanOrEqual
    GreaterThanOrEqual
    BeginsWith
    BeginsWith
    EndsWith
    EndsWith
    RegEx
    RegEx
    OperatorAny
    Any
    OperatorIPMatch
    IPMatch
    OperatorGeoMatch
    GeoMatch
    OperatorEqual
    Equal
    OperatorContains
    Contains
    OperatorLessThan
    LessThan
    OperatorGreaterThan
    GreaterThan
    OperatorLessThanOrEqual
    LessThanOrEqual
    OperatorGreaterThanOrEqual
    GreaterThanOrEqual
    OperatorBeginsWith
    BeginsWith
    OperatorEndsWith
    EndsWith
    OperatorRegEx
    RegEx
    Any
    Any
    IPMatch
    IPMatch
    GeoMatch
    GeoMatch
    Equal
    Equal
    Contains
    Contains
    LessThan
    LessThan
    GreaterThan
    GreaterThan
    LessThanOrEqual
    LessThanOrEqual
    GreaterThanOrEqual
    GreaterThanOrEqual
    BeginsWith
    BeginsWith
    EndsWith
    EndsWith
    RegEx
    RegEx
    Any
    Any
    IPMatch
    IPMatch
    GeoMatch
    GeoMatch
    Equal
    Equal
    Contains
    Contains
    LessThan
    LessThan
    GreaterThan
    GreaterThan
    LessThanOrEqual
    LessThanOrEqual
    GreaterThanOrEqual
    GreaterThanOrEqual
    BeginsWith
    BeginsWith
    EndsWith
    EndsWith
    RegEx
    RegEx
    ANY
    Any
    IP_MATCH
    IPMatch
    GEO_MATCH
    GeoMatch
    EQUAL
    Equal
    CONTAINS
    Contains
    LESS_THAN
    LessThan
    GREATER_THAN
    GreaterThan
    LESS_THAN_OR_EQUAL
    LessThanOrEqual
    GREATER_THAN_OR_EQUAL
    GreaterThanOrEqual
    BEGINS_WITH
    BeginsWith
    ENDS_WITH
    EndsWith
    REG_EX
    RegEx
    "Any"
    Any
    "IPMatch"
    IPMatch
    "GeoMatch"
    GeoMatch
    "Equal"
    Equal
    "Contains"
    Contains
    "LessThan"
    LessThan
    "GreaterThan"
    GreaterThan
    "LessThanOrEqual"
    LessThanOrEqual
    "GreaterThanOrEqual"
    GreaterThanOrEqual
    "BeginsWith"
    BeginsWith
    "EndsWith"
    EndsWith
    "RegEx"
    RegEx

    PolicyEnabledState, PolicyEnabledStateArgs

    Disabled
    Disabled
    Enabled
    Enabled
    PolicyEnabledStateDisabled
    Disabled
    PolicyEnabledStateEnabled
    Enabled
    Disabled
    Disabled
    Enabled
    Enabled
    Disabled
    Disabled
    Enabled
    Enabled
    DISABLED
    Disabled
    ENABLED
    Enabled
    "Disabled"
    Disabled
    "Enabled"
    Enabled

    PolicyMode, PolicyModeArgs

    Prevention
    Prevention
    Detection
    Detection
    PolicyModePrevention
    Prevention
    PolicyModeDetection
    Detection
    Prevention
    Prevention
    Detection
    Detection
    Prevention
    Prevention
    Detection
    Detection
    PREVENTION
    Prevention
    DETECTION
    Detection
    "Prevention"
    Prevention
    "Detection"
    Detection

    PolicySettings, PolicySettingsArgs

    DefaultCustomBlockResponseBody string
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    DefaultCustomBlockResponseStatusCode int
    If the action type is block, this field defines the default customer overridable http response status code.
    DefaultRedirectUrl string
    If action type is redirect, this field represents the default redirect URL for the client.
    EnabledState string | Pulumi.AzureNative.Cdn.PolicyEnabledState
    describes if the policy is in enabled state or disabled state
    Mode string | Pulumi.AzureNative.Cdn.PolicyMode
    Describes if it is in detection mode or prevention mode at policy level.
    DefaultCustomBlockResponseBody string
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    DefaultCustomBlockResponseStatusCode int
    If the action type is block, this field defines the default customer overridable http response status code.
    DefaultRedirectUrl string
    If action type is redirect, this field represents the default redirect URL for the client.
    EnabledState string | PolicyEnabledState
    describes if the policy is in enabled state or disabled state
    Mode string | PolicyMode
    Describes if it is in detection mode or prevention mode at policy level.
    defaultCustomBlockResponseBody String
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    defaultCustomBlockResponseStatusCode Integer
    If the action type is block, this field defines the default customer overridable http response status code.
    defaultRedirectUrl String
    If action type is redirect, this field represents the default redirect URL for the client.
    enabledState String | PolicyEnabledState
    describes if the policy is in enabled state or disabled state
    mode String | PolicyMode
    Describes if it is in detection mode or prevention mode at policy level.
    defaultCustomBlockResponseBody string
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    defaultCustomBlockResponseStatusCode number
    If the action type is block, this field defines the default customer overridable http response status code.
    defaultRedirectUrl string
    If action type is redirect, this field represents the default redirect URL for the client.
    enabledState string | PolicyEnabledState
    describes if the policy is in enabled state or disabled state
    mode string | PolicyMode
    Describes if it is in detection mode or prevention mode at policy level.
    default_custom_block_response_body str
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    default_custom_block_response_status_code int
    If the action type is block, this field defines the default customer overridable http response status code.
    default_redirect_url str
    If action type is redirect, this field represents the default redirect URL for the client.
    enabled_state str | PolicyEnabledState
    describes if the policy is in enabled state or disabled state
    mode str | PolicyMode
    Describes if it is in detection mode or prevention mode at policy level.
    defaultCustomBlockResponseBody String
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    defaultCustomBlockResponseStatusCode Number
    If the action type is block, this field defines the default customer overridable http response status code.
    defaultRedirectUrl String
    If action type is redirect, this field represents the default redirect URL for the client.
    enabledState String | "Disabled" | "Enabled"
    describes if the policy is in enabled state or disabled state
    mode String | "Prevention" | "Detection"
    Describes if it is in detection mode or prevention mode at policy level.

    PolicySettingsResponse, PolicySettingsResponseArgs

    DefaultCustomBlockResponseBody string
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    DefaultCustomBlockResponseStatusCode int
    If the action type is block, this field defines the default customer overridable http response status code.
    DefaultRedirectUrl string
    If action type is redirect, this field represents the default redirect URL for the client.
    EnabledState string
    describes if the policy is in enabled state or disabled state
    Mode string
    Describes if it is in detection mode or prevention mode at policy level.
    DefaultCustomBlockResponseBody string
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    DefaultCustomBlockResponseStatusCode int
    If the action type is block, this field defines the default customer overridable http response status code.
    DefaultRedirectUrl string
    If action type is redirect, this field represents the default redirect URL for the client.
    EnabledState string
    describes if the policy is in enabled state or disabled state
    Mode string
    Describes if it is in detection mode or prevention mode at policy level.
    defaultCustomBlockResponseBody String
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    defaultCustomBlockResponseStatusCode Integer
    If the action type is block, this field defines the default customer overridable http response status code.
    defaultRedirectUrl String
    If action type is redirect, this field represents the default redirect URL for the client.
    enabledState String
    describes if the policy is in enabled state or disabled state
    mode String
    Describes if it is in detection mode or prevention mode at policy level.
    defaultCustomBlockResponseBody string
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    defaultCustomBlockResponseStatusCode number
    If the action type is block, this field defines the default customer overridable http response status code.
    defaultRedirectUrl string
    If action type is redirect, this field represents the default redirect URL for the client.
    enabledState string
    describes if the policy is in enabled state or disabled state
    mode string
    Describes if it is in detection mode or prevention mode at policy level.
    default_custom_block_response_body str
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    default_custom_block_response_status_code int
    If the action type is block, this field defines the default customer overridable http response status code.
    default_redirect_url str
    If action type is redirect, this field represents the default redirect URL for the client.
    enabled_state str
    describes if the policy is in enabled state or disabled state
    mode str
    Describes if it is in detection mode or prevention mode at policy level.
    defaultCustomBlockResponseBody String
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    defaultCustomBlockResponseStatusCode Number
    If the action type is block, this field defines the default customer overridable http response status code.
    defaultRedirectUrl String
    If action type is redirect, this field represents the default redirect URL for the client.
    enabledState String
    describes if the policy is in enabled state or disabled state
    mode String
    Describes if it is in detection mode or prevention mode at policy level.

    RateLimitRule, RateLimitRuleArgs

    Action string | Pulumi.AzureNative.Cdn.ActionType
    Describes what action to be applied when rule matches
    MatchConditions List<Pulumi.AzureNative.Cdn.Inputs.MatchCondition>
    List of match conditions.
    Name string
    Defines the name of the custom rule
    Priority int
    Defines in what order this rule be evaluated in the overall list of custom rules
    RateLimitDurationInMinutes int
    Defines rate limit duration. Default is 1 minute.
    RateLimitThreshold int
    Defines rate limit threshold.
    EnabledState string | Pulumi.AzureNative.Cdn.CustomRuleEnabledState
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    Action string | ActionType
    Describes what action to be applied when rule matches
    MatchConditions []MatchCondition
    List of match conditions.
    Name string
    Defines the name of the custom rule
    Priority int
    Defines in what order this rule be evaluated in the overall list of custom rules
    RateLimitDurationInMinutes int
    Defines rate limit duration. Default is 1 minute.
    RateLimitThreshold int
    Defines rate limit threshold.
    EnabledState string | CustomRuleEnabledState
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    action String | ActionType
    Describes what action to be applied when rule matches
    matchConditions List<MatchCondition>
    List of match conditions.
    name String
    Defines the name of the custom rule
    priority Integer
    Defines in what order this rule be evaluated in the overall list of custom rules
    rateLimitDurationInMinutes Integer
    Defines rate limit duration. Default is 1 minute.
    rateLimitThreshold Integer
    Defines rate limit threshold.
    enabledState String | CustomRuleEnabledState
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    action string | ActionType
    Describes what action to be applied when rule matches
    matchConditions MatchCondition[]
    List of match conditions.
    name string
    Defines the name of the custom rule
    priority number
    Defines in what order this rule be evaluated in the overall list of custom rules
    rateLimitDurationInMinutes number
    Defines rate limit duration. Default is 1 minute.
    rateLimitThreshold number
    Defines rate limit threshold.
    enabledState string | CustomRuleEnabledState
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    action str | ActionType
    Describes what action to be applied when rule matches
    match_conditions Sequence[MatchCondition]
    List of match conditions.
    name str
    Defines the name of the custom rule
    priority int
    Defines in what order this rule be evaluated in the overall list of custom rules
    rate_limit_duration_in_minutes int
    Defines rate limit duration. Default is 1 minute.
    rate_limit_threshold int
    Defines rate limit threshold.
    enabled_state str | CustomRuleEnabledState
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    action String | "Allow" | "Block" | "Log" | "Redirect"
    Describes what action to be applied when rule matches
    matchConditions List<Property Map>
    List of match conditions.
    name String
    Defines the name of the custom rule
    priority Number
    Defines in what order this rule be evaluated in the overall list of custom rules
    rateLimitDurationInMinutes Number
    Defines rate limit duration. Default is 1 minute.
    rateLimitThreshold Number
    Defines rate limit threshold.
    enabledState String | "Disabled" | "Enabled"
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

    RateLimitRuleList, RateLimitRuleListArgs

    Rules []RateLimitRule
    List of rules
    rules RateLimitRule[]
    List of rules

    RateLimitRuleListResponse, RateLimitRuleListResponseArgs

    RateLimitRuleResponse, RateLimitRuleResponseArgs

    Action string
    Describes what action to be applied when rule matches
    MatchConditions List<Pulumi.AzureNative.Cdn.Inputs.MatchConditionResponse>
    List of match conditions.
    Name string
    Defines the name of the custom rule
    Priority int
    Defines in what order this rule be evaluated in the overall list of custom rules
    RateLimitDurationInMinutes int
    Defines rate limit duration. Default is 1 minute.
    RateLimitThreshold int
    Defines rate limit threshold.
    EnabledState string
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    Action string
    Describes what action to be applied when rule matches
    MatchConditions []MatchConditionResponse
    List of match conditions.
    Name string
    Defines the name of the custom rule
    Priority int
    Defines in what order this rule be evaluated in the overall list of custom rules
    RateLimitDurationInMinutes int
    Defines rate limit duration. Default is 1 minute.
    RateLimitThreshold int
    Defines rate limit threshold.
    EnabledState string
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    action String
    Describes what action to be applied when rule matches
    matchConditions List<MatchConditionResponse>
    List of match conditions.
    name String
    Defines the name of the custom rule
    priority Integer
    Defines in what order this rule be evaluated in the overall list of custom rules
    rateLimitDurationInMinutes Integer
    Defines rate limit duration. Default is 1 minute.
    rateLimitThreshold Integer
    Defines rate limit threshold.
    enabledState String
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    action string
    Describes what action to be applied when rule matches
    matchConditions MatchConditionResponse[]
    List of match conditions.
    name string
    Defines the name of the custom rule
    priority number
    Defines in what order this rule be evaluated in the overall list of custom rules
    rateLimitDurationInMinutes number
    Defines rate limit duration. Default is 1 minute.
    rateLimitThreshold number
    Defines rate limit threshold.
    enabledState string
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    action str
    Describes what action to be applied when rule matches
    match_conditions Sequence[MatchConditionResponse]
    List of match conditions.
    name str
    Defines the name of the custom rule
    priority int
    Defines in what order this rule be evaluated in the overall list of custom rules
    rate_limit_duration_in_minutes int
    Defines rate limit duration. Default is 1 minute.
    rate_limit_threshold int
    Defines rate limit threshold.
    enabled_state str
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    action String
    Describes what action to be applied when rule matches
    matchConditions List<Property Map>
    List of match conditions.
    name String
    Defines the name of the custom rule
    priority Number
    Defines in what order this rule be evaluated in the overall list of custom rules
    rateLimitDurationInMinutes Number
    Defines rate limit duration. Default is 1 minute.
    rateLimitThreshold Number
    Defines rate limit threshold.
    enabledState String
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

    Sku, SkuArgs

    Name string | Pulumi.AzureNative.Cdn.SkuName
    Name of the pricing tier.
    Name string | SkuName
    Name of the pricing tier.
    name String | SkuName
    Name of the pricing tier.
    name string | SkuName
    Name of the pricing tier.
    name str | SkuName
    Name of the pricing tier.

    SkuName, SkuNameArgs

    Standard_Verizon
    Standard_Verizon
    Premium_Verizon
    Premium_Verizon
    Custom_Verizon
    Custom_Verizon
    Standard_Akamai
    Standard_Akamai
    Standard_ChinaCdn
    Standard_ChinaCdn
    Standard_Microsoft
    Standard_Microsoft
    Premium_ChinaCdn
    Premium_ChinaCdn
    Standard_AzureFrontDoor
    Standard_AzureFrontDoor
    Premium_AzureFrontDoor
    Premium_AzureFrontDoor
    Standard_955BandWidth_ChinaCdn
    Standard_955BandWidth_ChinaCdn
    Standard_AvgBandWidth_ChinaCdn
    Standard_AvgBandWidth_ChinaCdn
    StandardPlus_ChinaCdn
    StandardPlus_ChinaCdn
    StandardPlus_955BandWidth_ChinaCdn
    StandardPlus_955BandWidth_ChinaCdn
    StandardPlus_AvgBandWidth_ChinaCdn
    StandardPlus_AvgBandWidth_ChinaCdn
    SkuName_Standard_Verizon
    Standard_Verizon
    SkuName_Premium_Verizon
    Premium_Verizon
    SkuName_Custom_Verizon
    Custom_Verizon
    SkuName_Standard_Akamai
    Standard_Akamai
    SkuName_Standard_ChinaCdn
    Standard_ChinaCdn
    SkuName_Standard_Microsoft
    Standard_Microsoft
    SkuName_Premium_ChinaCdn
    Premium_ChinaCdn
    SkuName_Standard_AzureFrontDoor
    Standard_AzureFrontDoor
    SkuName_Premium_AzureFrontDoor
    Premium_AzureFrontDoor
    SkuName_Standard_955BandWidth_ChinaCdn
    Standard_955BandWidth_ChinaCdn
    SkuName_Standard_AvgBandWidth_ChinaCdn
    Standard_AvgBandWidth_ChinaCdn
    SkuName_StandardPlus_ChinaCdn
    StandardPlus_ChinaCdn
    SkuName_StandardPlus_955BandWidth_ChinaCdn
    StandardPlus_955BandWidth_ChinaCdn
    SkuName_StandardPlus_AvgBandWidth_ChinaCdn
    StandardPlus_AvgBandWidth_ChinaCdn
    Standard_Verizon
    Standard_Verizon
    Premium_Verizon
    Premium_Verizon
    Custom_Verizon
    Custom_Verizon
    Standard_Akamai
    Standard_Akamai
    Standard_ChinaCdn
    Standard_ChinaCdn
    Standard_Microsoft
    Standard_Microsoft
    Premium_ChinaCdn
    Premium_ChinaCdn
    Standard_AzureFrontDoor
    Standard_AzureFrontDoor
    Premium_AzureFrontDoor
    Premium_AzureFrontDoor
    Standard_955BandWidth_ChinaCdn
    Standard_955BandWidth_ChinaCdn
    Standard_AvgBandWidth_ChinaCdn
    Standard_AvgBandWidth_ChinaCdn
    StandardPlus_ChinaCdn
    StandardPlus_ChinaCdn
    StandardPlus_955BandWidth_ChinaCdn
    StandardPlus_955BandWidth_ChinaCdn
    StandardPlus_AvgBandWidth_ChinaCdn
    StandardPlus_AvgBandWidth_ChinaCdn
    Standard_Verizon
    Standard_Verizon
    Premium_Verizon
    Premium_Verizon
    Custom_Verizon
    Custom_Verizon
    Standard_Akamai
    Standard_Akamai
    Standard_ChinaCdn
    Standard_ChinaCdn
    Standard_Microsoft
    Standard_Microsoft
    Premium_ChinaCdn
    Premium_ChinaCdn
    Standard_AzureFrontDoor
    Standard_AzureFrontDoor
    Premium_AzureFrontDoor
    Premium_AzureFrontDoor
    Standard_955BandWidth_ChinaCdn
    Standard_955BandWidth_ChinaCdn
    Standard_AvgBandWidth_ChinaCdn
    Standard_AvgBandWidth_ChinaCdn
    StandardPlus_ChinaCdn
    StandardPlus_ChinaCdn
    StandardPlus_955BandWidth_ChinaCdn
    StandardPlus_955BandWidth_ChinaCdn
    StandardPlus_AvgBandWidth_ChinaCdn
    StandardPlus_AvgBandWidth_ChinaCdn
    STANDARD_VERIZON
    Standard_Verizon
    PREMIUM_VERIZON
    Premium_Verizon
    CUSTOM_VERIZON
    Custom_Verizon
    STANDARD_AKAMAI
    Standard_Akamai
    STANDARD_CHINA_CDN
    Standard_ChinaCdn
    STANDARD_MICROSOFT
    Standard_Microsoft
    PREMIUM_CHINA_CDN
    Premium_ChinaCdn
    STANDARD_AZURE_FRONT_DOOR
    Standard_AzureFrontDoor
    PREMIUM_AZURE_FRONT_DOOR
    Premium_AzureFrontDoor
    STANDARD_955_BAND_WIDTH_CHINA_CDN
    Standard_955BandWidth_ChinaCdn
    STANDARD_AVG_BAND_WIDTH_CHINA_CDN
    Standard_AvgBandWidth_ChinaCdn
    STANDARD_PLUS_CHINA_CDN
    StandardPlus_ChinaCdn
    STANDARD_PLUS_955_BAND_WIDTH_CHINA_CDN
    StandardPlus_955BandWidth_ChinaCdn
    STANDARD_PLUS_AVG_BAND_WIDTH_CHINA_CDN
    StandardPlus_AvgBandWidth_ChinaCdn
    "Standard_Verizon"
    Standard_Verizon
    "Premium_Verizon"
    Premium_Verizon
    "Custom_Verizon"
    Custom_Verizon
    "Standard_Akamai"
    Standard_Akamai
    "Standard_ChinaCdn"
    Standard_ChinaCdn
    "Standard_Microsoft"
    Standard_Microsoft
    "Premium_ChinaCdn"
    Premium_ChinaCdn
    "Standard_AzureFrontDoor"
    Standard_AzureFrontDoor
    "Premium_AzureFrontDoor"
    Premium_AzureFrontDoor
    "Standard_955BandWidth_ChinaCdn"
    Standard_955BandWidth_ChinaCdn
    "Standard_AvgBandWidth_ChinaCdn"
    Standard_AvgBandWidth_ChinaCdn
    "StandardPlus_ChinaCdn"
    StandardPlus_ChinaCdn
    "StandardPlus_955BandWidth_ChinaCdn"
    StandardPlus_955BandWidth_ChinaCdn
    "StandardPlus_AvgBandWidth_ChinaCdn"
    StandardPlus_AvgBandWidth_ChinaCdn

    SkuResponse, SkuResponseArgs

    Name string
    Name of the pricing tier.
    Name string
    Name of the pricing tier.
    name String
    Name of the pricing tier.
    name string
    Name of the pricing tier.
    name str
    Name of the pricing tier.
    name String
    Name of the pricing tier.

    SystemDataResponse, SystemDataResponseArgs

    CreatedAt string
    The timestamp of resource creation (UTC)
    CreatedBy string
    An identifier for the identity that created the resource
    CreatedByType string
    The type of identity that created the resource
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    An identifier for the identity that last modified the resource
    LastModifiedByType string
    The type of identity that last modified the resource
    CreatedAt string
    The timestamp of resource creation (UTC)
    CreatedBy string
    An identifier for the identity that created the resource
    CreatedByType string
    The type of identity that created the resource
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    An identifier for the identity that last modified the resource
    LastModifiedByType string
    The type of identity that last modified the resource
    createdAt String
    The timestamp of resource creation (UTC)
    createdBy String
    An identifier for the identity that created the resource
    createdByType String
    The type of identity that created the resource
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    An identifier for the identity that last modified the resource
    lastModifiedByType String
    The type of identity that last modified the resource
    createdAt string
    The timestamp of resource creation (UTC)
    createdBy string
    An identifier for the identity that created the resource
    createdByType string
    The type of identity that created the resource
    lastModifiedAt string
    The timestamp of resource last modification (UTC)
    lastModifiedBy string
    An identifier for the identity that last modified the resource
    lastModifiedByType string
    The type of identity that last modified the resource
    created_at str
    The timestamp of resource creation (UTC)
    created_by str
    An identifier for the identity that created the resource
    created_by_type str
    The type of identity that created the resource
    last_modified_at str
    The timestamp of resource last modification (UTC)
    last_modified_by str
    An identifier for the identity that last modified the resource
    last_modified_by_type str
    The type of identity that last modified the resource
    createdAt String
    The timestamp of resource creation (UTC)
    createdBy String
    An identifier for the identity that created the resource
    createdByType String
    The type of identity that created the resource
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    An identifier for the identity that last modified the resource
    lastModifiedByType String
    The type of identity that last modified the resource

    TransformType, TransformTypeArgs

    Lowercase
    Lowercase
    Uppercase
    Uppercase
    Trim
    Trim
    UrlDecode
    UrlDecode
    UrlEncode
    UrlEncode
    RemoveNulls
    RemoveNulls
    TransformTypeLowercase
    Lowercase
    TransformTypeUppercase
    Uppercase
    TransformTypeTrim
    Trim
    TransformTypeUrlDecode
    UrlDecode
    TransformTypeUrlEncode
    UrlEncode
    TransformTypeRemoveNulls
    RemoveNulls
    Lowercase
    Lowercase
    Uppercase
    Uppercase
    Trim
    Trim
    UrlDecode
    UrlDecode
    UrlEncode
    UrlEncode
    RemoveNulls
    RemoveNulls
    Lowercase
    Lowercase
    Uppercase
    Uppercase
    Trim
    Trim
    UrlDecode
    UrlDecode
    UrlEncode
    UrlEncode
    RemoveNulls
    RemoveNulls
    LOWERCASE
    Lowercase
    UPPERCASE
    Uppercase
    TRIM
    Trim
    URL_DECODE
    UrlDecode
    URL_ENCODE
    UrlEncode
    REMOVE_NULLS
    RemoveNulls
    "Lowercase"
    Lowercase
    "Uppercase"
    Uppercase
    "Trim"
    Trim
    "UrlDecode"
    UrlDecode
    "UrlEncode"
    UrlEncode
    "RemoveNulls"
    RemoveNulls

    Import

    An existing resource can be imported using its type token, name, and identifier, e.g.

    $ pulumi import azure-native:cdn:Policy MicrosoftCdnWafPolicy /subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Cdn/CdnWebApplicationFirewallPolicies/MicrosoftCdnWafPolicy 
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    azure-native-v1 pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native-v1 logo
    These are the docs for Azure Native v1. We recommenend using the latest version, Azure Native v2.
    Azure Native v1 v1.104.0 published on Thursday, Jul 6, 2023 by Pulumi