Docs
Packages
These are the docs for Azure Native v1. We recommenend using the latest version, Azure Native v2.
Azure Native v1 v1.104.0 published on Thursday, Jul 6, 2023 by Pulumi
azure-native.network.Policy
Explore with Pulumi AI
These are the docs for Azure Native v1. We recommenend using the latest version, Azure Native v2.
Azure Native v1 v1.104.0 published on Thursday, Jul 6, 2023 by Pulumi
Defines web application firewall policy. API Version: 2020-11-01.
Example Usage
Creates specific policy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var policy = new AzureNative.Network.Policy("policy", new()
{
CustomRules = new AzureNative.Network.Inputs.CustomRuleListArgs
{
Rules = new[]
{
new AzureNative.Network.Inputs.CustomRuleArgs
{
Action = "Block",
MatchConditions = new[]
{
new AzureNative.Network.Inputs.FrontDoorMatchConditionArgs
{
MatchValue = new[]
{
"192.168.1.0/24",
"10.0.0.0/24",
},
MatchVariable = "RemoteAddr",
Operator = "IPMatch",
},
},
Name = "Rule1",
Priority = 1,
RateLimitThreshold = 1000,
RuleType = "RateLimitRule",
},
new AzureNative.Network.Inputs.CustomRuleArgs
{
Action = "Block",
MatchConditions = new[]
{
new AzureNative.Network.Inputs.FrontDoorMatchConditionArgs
{
MatchValue = new[]
{
"CH",
},
MatchVariable = "RemoteAddr",
Operator = "GeoMatch",
},
new AzureNative.Network.Inputs.FrontDoorMatchConditionArgs
{
MatchValue = new[]
{
"windows",
},
MatchVariable = "RequestHeader",
Operator = "Contains",
Selector = "UserAgent",
Transforms = new[]
{
"Lowercase",
},
},
},
Name = "Rule2",
Priority = 2,
RuleType = "MatchRule",
},
},
},
ManagedRules = new AzureNative.Network.Inputs.ManagedRuleSetListArgs
{
ManagedRuleSets = new[]
{
new AzureNative.Network.Inputs.FrontDoorManagedRuleSetArgs
{
Exclusions = new[]
{
new AzureNative.Network.Inputs.ManagedRuleExclusionArgs
{
MatchVariable = "RequestHeaderNames",
Selector = "User-Agent",
SelectorMatchOperator = "Equals",
},
},
RuleGroupOverrides = new[]
{
new AzureNative.Network.Inputs.FrontDoorManagedRuleGroupOverrideArgs
{
Exclusions = new[]
{
new AzureNative.Network.Inputs.ManagedRuleExclusionArgs
{
MatchVariable = "RequestCookieNames",
Selector = "token",
SelectorMatchOperator = "StartsWith",
},
},
RuleGroupName = "SQLI",
Rules = new[]
{
new AzureNative.Network.Inputs.FrontDoorManagedRuleOverrideArgs
{
Action = "Redirect",
EnabledState = "Enabled",
Exclusions = new[]
{
new AzureNative.Network.Inputs.ManagedRuleExclusionArgs
{
MatchVariable = "QueryStringArgNames",
Selector = "query",
SelectorMatchOperator = "Equals",
},
},
RuleId = "942100",
},
new AzureNative.Network.Inputs.FrontDoorManagedRuleOverrideArgs
{
EnabledState = "Disabled",
RuleId = "942110",
},
},
},
},
RuleSetAction = "Block",
RuleSetType = "DefaultRuleSet",
RuleSetVersion = "1.0",
},
},
},
PolicyName = "Policy1",
PolicySettings = new AzureNative.Network.Inputs.FrontDoorPolicySettingsArgs
{
CustomBlockResponseBody = "PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==",
CustomBlockResponseStatusCode = 499,
EnabledState = "Enabled",
Mode = "Prevention",
RedirectUrl = "http://www.bing.com",
RequestBodyCheck = "Disabled",
},
ResourceGroupName = "rg1",
Sku = new AzureNative.Network.Inputs.SkuArgs
{
Name = "Classic_AzureFrontDoor",
},
});
});
Coming soon!
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.network.Policy;
import com.pulumi.azurenative.network.PolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var policy = new Policy("policy", PolicyArgs.builder()
.customRules(Map.of("rules",
Map.ofEntries(
Map.entry("action", "Block"),
Map.entry("matchConditions", Map.ofEntries(
Map.entry("matchValue",
"192.168.1.0/24",
"10.0.0.0/24"),
Map.entry("matchVariable", "RemoteAddr"),
Map.entry("operator", "IPMatch")
)),
Map.entry("name", "Rule1"),
Map.entry("priority", 1),
Map.entry("rateLimitThreshold", 1000),
Map.entry("ruleType", "RateLimitRule")
),
Map.ofEntries(
Map.entry("action", "Block"),
Map.entry("matchConditions",
Map.ofEntries(
Map.entry("matchValue", "CH"),
Map.entry("matchVariable", "RemoteAddr"),
Map.entry("operator", "GeoMatch")
),
Map.ofEntries(
Map.entry("matchValue", "windows"),
Map.entry("matchVariable", "RequestHeader"),
Map.entry("operator", "Contains"),
Map.entry("selector", "UserAgent"),
Map.entry("transforms", "Lowercase")
)),
Map.entry("name", "Rule2"),
Map.entry("priority", 2),
Map.entry("ruleType", "MatchRule")
)))
.managedRules(Map.of("managedRuleSets", Map.ofEntries(
Map.entry("exclusions", Map.ofEntries(
Map.entry("matchVariable", "RequestHeaderNames"),
Map.entry("selector", "User-Agent"),
Map.entry("selectorMatchOperator", "Equals")
)),
Map.entry("ruleGroupOverrides", Map.ofEntries(
Map.entry("exclusions", Map.ofEntries(
Map.entry("matchVariable", "RequestCookieNames"),
Map.entry("selector", "token"),
Map.entry("selectorMatchOperator", "StartsWith")
)),
Map.entry("ruleGroupName", "SQLI"),
Map.entry("rules",
Map.ofEntries(
Map.entry("action", "Redirect"),
Map.entry("enabledState", "Enabled"),
Map.entry("exclusions", Map.ofEntries(
Map.entry("matchVariable", "QueryStringArgNames"),
Map.entry("selector", "query"),
Map.entry("selectorMatchOperator", "Equals")
)),
Map.entry("ruleId", "942100")
),
Map.ofEntries(
Map.entry("enabledState", "Disabled"),
Map.entry("ruleId", "942110")
))
)),
Map.entry("ruleSetAction", "Block"),
Map.entry("ruleSetType", "DefaultRuleSet"),
Map.entry("ruleSetVersion", "1.0")
)))
.policyName("Policy1")
.policySettings(Map.ofEntries(
Map.entry("customBlockResponseBody", "PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg=="),
Map.entry("customBlockResponseStatusCode", 499),
Map.entry("enabledState", "Enabled"),
Map.entry("mode", "Prevention"),
Map.entry("redirectUrl", "http://www.bing.com"),
Map.entry("requestBodyCheck", "Disabled")
))
.resourceGroupName("rg1")
.sku(Map.of("name", "Classic_AzureFrontDoor"))
.build());
}
}
import pulumi
import pulumi_azure_native as azure_native
policy = azure_native.network.Policy("policy",
custom_rules=azure_native.network.CustomRuleListResponseArgs(
rules=[
{
"action": "Block",
"matchConditions": [azure_native.network.FrontDoorMatchConditionArgs(
match_value=[
"192.168.1.0/24",
"10.0.0.0/24",
],
match_variable="RemoteAddr",
operator="IPMatch",
)],
"name": "Rule1",
"priority": 1,
"rateLimitThreshold": 1000,
"ruleType": "RateLimitRule",
},
{
"action": "Block",
"matchConditions": [
azure_native.network.FrontDoorMatchConditionArgs(
match_value=["CH"],
match_variable="RemoteAddr",
operator="GeoMatch",
),
azure_native.network.FrontDoorMatchConditionArgs(
match_value=["windows"],
match_variable="RequestHeader",
operator="Contains",
selector="UserAgent",
transforms=["Lowercase"],
),
],
"name": "Rule2",
"priority": 2,
"ruleType": "MatchRule",
},
],
),
managed_rules=azure_native.network.ManagedRuleSetListResponseArgs(
managed_rule_sets=[{
"exclusions": [azure_native.network.ManagedRuleExclusionArgs(
match_variable="RequestHeaderNames",
selector="User-Agent",
selector_match_operator="Equals",
)],
"ruleGroupOverrides": [{
"exclusions": [azure_native.network.ManagedRuleExclusionArgs(
match_variable="RequestCookieNames",
selector="token",
selector_match_operator="StartsWith",
)],
"ruleGroupName": "SQLI",
"rules": [
{
"action": "Redirect",
"enabledState": "Enabled",
"exclusions": [azure_native.network.ManagedRuleExclusionArgs(
match_variable="QueryStringArgNames",
selector="query",
selector_match_operator="Equals",
)],
"ruleId": "942100",
},
azure_native.network.FrontDoorManagedRuleOverrideArgs(
enabled_state="Disabled",
rule_id="942110",
),
],
}],
"ruleSetAction": "Block",
"ruleSetType": "DefaultRuleSet",
"ruleSetVersion": "1.0",
}],
),
policy_name="Policy1",
policy_settings=azure_native.network.FrontDoorPolicySettingsArgs(
custom_block_response_body="PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==",
custom_block_response_status_code=499,
enabled_state="Enabled",
mode="Prevention",
redirect_url="http://www.bing.com",
request_body_check="Disabled",
),
resource_group_name="rg1",
sku=azure_native.network.SkuArgs(
name="Classic_AzureFrontDoor",
))
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const policy = new azure_native.network.Policy("policy", {
customRules: {
rules: [
{
action: "Block",
matchConditions: [{
matchValue: [
"192.168.1.0/24",
"10.0.0.0/24",
],
matchVariable: "RemoteAddr",
operator: "IPMatch",
}],
name: "Rule1",
priority: 1,
rateLimitThreshold: 1000,
ruleType: "RateLimitRule",
},
{
action: "Block",
matchConditions: [
{
matchValue: ["CH"],
matchVariable: "RemoteAddr",
operator: "GeoMatch",
},
{
matchValue: ["windows"],
matchVariable: "RequestHeader",
operator: "Contains",
selector: "UserAgent",
transforms: ["Lowercase"],
},
],
name: "Rule2",
priority: 2,
ruleType: "MatchRule",
},
],
},
managedRules: {
managedRuleSets: [{
exclusions: [{
matchVariable: "RequestHeaderNames",
selector: "User-Agent",
selectorMatchOperator: "Equals",
}],
ruleGroupOverrides: [{
exclusions: [{
matchVariable: "RequestCookieNames",
selector: "token",
selectorMatchOperator: "StartsWith",
}],
ruleGroupName: "SQLI",
rules: [
{
action: "Redirect",
enabledState: "Enabled",
exclusions: [{
matchVariable: "QueryStringArgNames",
selector: "query",
selectorMatchOperator: "Equals",
}],
ruleId: "942100",
},
{
enabledState: "Disabled",
ruleId: "942110",
},
],
}],
ruleSetAction: "Block",
ruleSetType: "DefaultRuleSet",
ruleSetVersion: "1.0",
}],
},
policyName: "Policy1",
policySettings: {
customBlockResponseBody: "PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==",
customBlockResponseStatusCode: 499,
enabledState: "Enabled",
mode: "Prevention",
redirectUrl: "http://www.bing.com",
requestBodyCheck: "Disabled",
},
resourceGroupName: "rg1",
sku: {
name: "Classic_AzureFrontDoor",
},
});
resources:
policy:
type: azure-native:network:Policy
properties:
customRules:
rules:
- action: Block
matchConditions:
- matchValue:
- 192.168.1.0/24
- 10.0.0.0/24
matchVariable: RemoteAddr
operator: IPMatch
name: Rule1
priority: 1
rateLimitThreshold: 1000
ruleType: RateLimitRule
- action: Block
matchConditions:
- matchValue:
- CH
matchVariable: RemoteAddr
operator: GeoMatch
- matchValue:
- windows
matchVariable: RequestHeader
operator: Contains
selector: UserAgent
transforms:
- Lowercase
name: Rule2
priority: 2
ruleType: MatchRule
managedRules:
managedRuleSets:
- exclusions:
- matchVariable: RequestHeaderNames
selector: User-Agent
selectorMatchOperator: Equals
ruleGroupOverrides:
- exclusions:
- matchVariable: RequestCookieNames
selector: token
selectorMatchOperator: StartsWith
ruleGroupName: SQLI
rules:
- action: Redirect
enabledState: Enabled
exclusions:
- matchVariable: QueryStringArgNames
selector: query
selectorMatchOperator: Equals
ruleId: '942100'
- enabledState: Disabled
ruleId: '942110'
ruleSetAction: Block
ruleSetType: DefaultRuleSet
ruleSetVersion: '1.0'
policyName: Policy1
policySettings:
customBlockResponseBody: PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==
customBlockResponseStatusCode: 499
enabledState: Enabled
mode: Prevention
redirectUrl: http://www.bing.com
requestBodyCheck: Disabled
resourceGroupName: rg1
sku:
name: Classic_AzureFrontDoor
Create Policy Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Policy(name: string, args: PolicyArgs, opts?: CustomResourceOptions);@overload
def Policy(resource_name: str,
args: PolicyArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Policy(resource_name: str,
opts: Optional[ResourceOptions] = None,
resource_group_name: Optional[str] = None,
custom_rules: Optional[CustomRuleListArgs] = None,
location: Optional[str] = None,
managed_rules: Optional[ManagedRuleSetListArgs] = None,
policy_name: Optional[str] = None,
policy_settings: Optional[FrontDoorPolicySettingsArgs] = None,
sku: Optional[SkuArgs] = None,
tags: Optional[Mapping[str, str]] = None)func NewPolicy(ctx *Context, name string, args PolicyArgs, opts ...ResourceOption) (*Policy, error)public Policy(string name, PolicyArgs args, CustomResourceOptions? opts = null)
public Policy(String name, PolicyArgs args)
public Policy(String name, PolicyArgs args, CustomResourceOptions options)
type: azure-native:network:Policy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args PolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args PolicyArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args PolicyArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args PolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args PolicyArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var examplepolicyResourceResourceFromNetwork = new AzureNative.Network.Policy("examplepolicyResourceResourceFromNetwork", new()
{
ResourceGroupName = "string",
CustomRules =
{
{ "rules", new[]
{
{
{ "action", "string" },
{ "matchConditions", new[]
{
{
{ "matchValue", new[]
{
"string",
} },
{ "matchVariable", "string" },
{ "operator", "string" },
{ "negateCondition", false },
{ "selector", "string" },
{ "transforms", new[]
{
"string",
} },
},
} },
{ "priority", 0 },
{ "ruleType", "string" },
{ "enabledState", "string" },
{ "name", "string" },
{ "rateLimitDurationInMinutes", 0 },
{ "rateLimitThreshold", 0 },
},
} },
},
Location = "string",
ManagedRules =
{
{ "managedRuleSets", new[]
{
{
{ "ruleSetType", "string" },
{ "ruleSetVersion", "string" },
{ "exclusions", new[]
{
{
{ "matchVariable", "string" },
{ "selector", "string" },
{ "selectorMatchOperator", "string" },
},
} },
{ "ruleGroupOverrides", new[]
{
{
{ "ruleGroupName", "string" },
{ "exclusions", new[]
{
{
{ "matchVariable", "string" },
{ "selector", "string" },
{ "selectorMatchOperator", "string" },
},
} },
{ "rules", new[]
{
{
{ "ruleId", "string" },
{ "action", "string" },
{ "enabledState", "string" },
{ "exclusions", new[]
{
{
{ "matchVariable", "string" },
{ "selector", "string" },
{ "selectorMatchOperator", "string" },
},
} },
},
} },
},
} },
{ "ruleSetAction", "string" },
},
} },
},
PolicyName = "string",
PolicySettings =
{
{ "customBlockResponseBody", "string" },
{ "customBlockResponseStatusCode", 0 },
{ "enabledState", "string" },
{ "mode", "string" },
{ "redirectUrl", "string" },
{ "requestBodyCheck", "string" },
},
Sku =
{
{ "name", "string" },
},
Tags =
{
{ "string", "string" },
},
});
example, err := network.NewPolicy(ctx, "examplepolicyResourceResourceFromNetwork", &network.PolicyArgs{
ResourceGroupName: "string",
CustomRules: map[string]interface{}{
"rules": []map[string]interface{}{
map[string]interface{}{
"action": "string",
"matchConditions": []map[string]interface{}{
map[string]interface{}{
"matchValue": []string{
"string",
},
"matchVariable": "string",
"operator": "string",
"negateCondition": false,
"selector": "string",
"transforms": []string{
"string",
},
},
},
"priority": 0,
"ruleType": "string",
"enabledState": "string",
"name": "string",
"rateLimitDurationInMinutes": 0,
"rateLimitThreshold": 0,
},
},
},
Location: "string",
ManagedRules: map[string]interface{}{
"managedRuleSets": []map[string]interface{}{
map[string]interface{}{
"ruleSetType": "string",
"ruleSetVersion": "string",
"exclusions": []map[string]interface{}{
map[string]interface{}{
"matchVariable": "string",
"selector": "string",
"selectorMatchOperator": "string",
},
},
"ruleGroupOverrides": []map[string]interface{}{
map[string]interface{}{
"ruleGroupName": "string",
"exclusions": []map[string]interface{}{
map[string]interface{}{
"matchVariable": "string",
"selector": "string",
"selectorMatchOperator": "string",
},
},
"rules": []map[string]interface{}{
map[string]interface{}{
"ruleId": "string",
"action": "string",
"enabledState": "string",
"exclusions": []map[string]interface{}{
map[string]interface{}{
"matchVariable": "string",
"selector": "string",
"selectorMatchOperator": "string",
},
},
},
},
},
},
"ruleSetAction": "string",
},
},
},
PolicyName: "string",
PolicySettings: map[string]interface{}{
"customBlockResponseBody": "string",
"customBlockResponseStatusCode": 0,
"enabledState": "string",
"mode": "string",
"redirectUrl": "string",
"requestBodyCheck": "string",
},
Sku: map[string]interface{}{
"name": "string",
},
Tags: map[string]interface{}{
"string": "string",
},
})
var examplepolicyResourceResourceFromNetwork = new Policy("examplepolicyResourceResourceFromNetwork", PolicyArgs.builder()
.resourceGroupName("string")
.customRules(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
.location("string")
.managedRules(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
.policyName("string")
.policySettings(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
.sku(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
.tags(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
.build());
examplepolicy_resource_resource_from_network = azure_native.network.Policy("examplepolicyResourceResourceFromNetwork",
resource_group_name=string,
custom_rules={
rules: [{
action: string,
matchConditions: [{
matchValue: [string],
matchVariable: string,
operator: string,
negateCondition: False,
selector: string,
transforms: [string],
}],
priority: 0,
ruleType: string,
enabledState: string,
name: string,
rateLimitDurationInMinutes: 0,
rateLimitThreshold: 0,
}],
},
location=string,
managed_rules={
managedRuleSets: [{
ruleSetType: string,
ruleSetVersion: string,
exclusions: [{
matchVariable: string,
selector: string,
selectorMatchOperator: string,
}],
ruleGroupOverrides: [{
ruleGroupName: string,
exclusions: [{
matchVariable: string,
selector: string,
selectorMatchOperator: string,
}],
rules: [{
ruleId: string,
action: string,
enabledState: string,
exclusions: [{
matchVariable: string,
selector: string,
selectorMatchOperator: string,
}],
}],
}],
ruleSetAction: string,
}],
},
policy_name=string,
policy_settings={
customBlockResponseBody: string,
customBlockResponseStatusCode: 0,
enabledState: string,
mode: string,
redirectUrl: string,
requestBodyCheck: string,
},
sku={
name: string,
},
tags={
string: string,
})
const examplepolicyResourceResourceFromNetwork = new azure_native.network.Policy("examplepolicyResourceResourceFromNetwork", {
resourceGroupName: "string",
customRules: {
rules: [{
action: "string",
matchConditions: [{
matchValue: ["string"],
matchVariable: "string",
operator: "string",
negateCondition: false,
selector: "string",
transforms: ["string"],
}],
priority: 0,
ruleType: "string",
enabledState: "string",
name: "string",
rateLimitDurationInMinutes: 0,
rateLimitThreshold: 0,
}],
},
location: "string",
managedRules: {
managedRuleSets: [{
ruleSetType: "string",
ruleSetVersion: "string",
exclusions: [{
matchVariable: "string",
selector: "string",
selectorMatchOperator: "string",
}],
ruleGroupOverrides: [{
ruleGroupName: "string",
exclusions: [{
matchVariable: "string",
selector: "string",
selectorMatchOperator: "string",
}],
rules: [{
ruleId: "string",
action: "string",
enabledState: "string",
exclusions: [{
matchVariable: "string",
selector: "string",
selectorMatchOperator: "string",
}],
}],
}],
ruleSetAction: "string",
}],
},
policyName: "string",
policySettings: {
customBlockResponseBody: "string",
customBlockResponseStatusCode: 0,
enabledState: "string",
mode: "string",
redirectUrl: "string",
requestBodyCheck: "string",
},
sku: {
name: "string",
},
tags: {
string: "string",
},
});
type: azure-native:network:Policy
properties:
customRules:
rules:
- action: string
enabledState: string
matchConditions:
- matchValue:
- string
matchVariable: string
negateCondition: false
operator: string
selector: string
transforms:
- string
name: string
priority: 0
rateLimitDurationInMinutes: 0
rateLimitThreshold: 0
ruleType: string
location: string
managedRules:
managedRuleSets:
- exclusions:
- matchVariable: string
selector: string
selectorMatchOperator: string
ruleGroupOverrides:
- exclusions:
- matchVariable: string
selector: string
selectorMatchOperator: string
ruleGroupName: string
rules:
- action: string
enabledState: string
exclusions:
- matchVariable: string
selector: string
selectorMatchOperator: string
ruleId: string
ruleSetAction: string
ruleSetType: string
ruleSetVersion: string
policyName: string
policySettings:
customBlockResponseBody: string
customBlockResponseStatusCode: 0
enabledState: string
mode: string
redirectUrl: string
requestBodyCheck: string
resourceGroupName: string
sku:
name: string
tags:
string: string
Policy Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The Policy resource accepts the following input properties:
- Resource
Group stringName - Name of the Resource group within the Azure subscription.
- Custom
Rules Pulumi.Azure Native. Network. Inputs. Custom Rule List - Describes custom rules inside the policy.
- Location string
- Resource location.
- Managed
Rules Pulumi.Azure Native. Network. Inputs. Managed Rule Set List - Describes managed rules inside the policy.
- Policy
Name string - The name of the Web Application Firewall Policy.
- Policy
Settings Pulumi.Azure Native. Network. Inputs. Front Door Policy Settings - Describes settings for the policy.
- Sku
Pulumi.
Azure Native. Network. Inputs. Sku - The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
- Dictionary<string, string>
- Resource tags.
- Resource
Group stringName - Name of the Resource group within the Azure subscription.
- Custom
Rules CustomRule List Args - Describes custom rules inside the policy.
- Location string
- Resource location.
- Managed
Rules ManagedRule Set List Args - Describes managed rules inside the policy.
- Policy
Name string - The name of the Web Application Firewall Policy.
- Policy
Settings FrontDoor Policy Settings Args - Describes settings for the policy.
- Sku
Sku
Args - The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
- map[string]string
- Resource tags.
- resource
Group StringName - Name of the Resource group within the Azure subscription.
- custom
Rules CustomRule List - Describes custom rules inside the policy.
- location String
- Resource location.
- managed
Rules ManagedRule Set List - Describes managed rules inside the policy.
- policy
Name String - The name of the Web Application Firewall Policy.
- policy
Settings FrontDoor Policy Settings - Describes settings for the policy.
- sku Sku
- The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
- Map<String,String>
- Resource tags.
- resource
Group stringName - Name of the Resource group within the Azure subscription.
- custom
Rules CustomRule List - Describes custom rules inside the policy.
- location string
- Resource location.
- managed
Rules ManagedRule Set List - Describes managed rules inside the policy.
- policy
Name string - The name of the Web Application Firewall Policy.
- policy
Settings FrontDoor Policy Settings - Describes settings for the policy.
- sku Sku
- The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
- {[key: string]: string}
- Resource tags.
- resource_
group_ strname - Name of the Resource group within the Azure subscription.
- custom_
rules CustomRule List Args - Describes custom rules inside the policy.
- location str
- Resource location.
- managed_
rules ManagedRule Set List Args - Describes managed rules inside the policy.
- policy_
name str - The name of the Web Application Firewall Policy.
- policy_
settings FrontDoor Policy Settings Args - Describes settings for the policy.
- sku
Sku
Args - The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
- Mapping[str, str]
- Resource tags.
- resource
Group StringName - Name of the Resource group within the Azure subscription.
- custom
Rules Property Map - Describes custom rules inside the policy.
- location String
- Resource location.
- managed
Rules Property Map - Describes managed rules inside the policy.
- policy
Name String - The name of the Web Application Firewall Policy.
- policy
Settings Property Map - Describes settings for the policy.
- sku Property Map
- The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
- Map<String>
- Resource tags.
Outputs
All input properties are implicitly available as output properties. Additionally, the Policy resource produces the following output properties:
- Frontend
Endpoint List<Pulumi.Links Azure Native. Network. Outputs. Frontend Endpoint Link Response> - Describes Frontend Endpoints associated with this Web Application Firewall policy.
- Id string
- The provider-assigned unique ID for this managed resource.
- Name string
- Resource name.
- Provisioning
State string - Provisioning state of the policy.
- Resource
State string - Routing
Rule List<Pulumi.Links Azure Native. Network. Outputs. Routing Rule Link Response> - Describes Routing Rules associated with this Web Application Firewall policy.
- Security
Policy List<Pulumi.Links Azure Native. Network. Outputs. Security Policy Link Response> - Describes Security Policy associated with this Web Application Firewall policy.
- Type string
- Resource type.
- Etag string
- Gets a unique read-only string that changes whenever the resource is updated.
- Frontend
Endpoint []FrontendLinks Endpoint Link Response - Describes Frontend Endpoints associated with this Web Application Firewall policy.
- Id string
- The provider-assigned unique ID for this managed resource.
- Name string
- Resource name.
- Provisioning
State string - Provisioning state of the policy.
- Resource
State string - Routing
Rule []RoutingLinks Rule Link Response - Describes Routing Rules associated with this Web Application Firewall policy.
- Security
Policy []SecurityLinks Policy Link Response - Describes Security Policy associated with this Web Application Firewall policy.
- Type string
- Resource type.
- Etag string
- Gets a unique read-only string that changes whenever the resource is updated.
- frontend
Endpoint List<FrontendLinks Endpoint Link Response> - Describes Frontend Endpoints associated with this Web Application Firewall policy.
- id String
- The provider-assigned unique ID for this managed resource.
- name String
- Resource name.
- provisioning
State String - Provisioning state of the policy.
- resource
State String - routing
Rule List<RoutingLinks Rule Link Response> - Describes Routing Rules associated with this Web Application Firewall policy.
- security
Policy List<SecurityLinks Policy Link Response> - Describes Security Policy associated with this Web Application Firewall policy.
- type String
- Resource type.
- etag String
- Gets a unique read-only string that changes whenever the resource is updated.
- frontend
Endpoint FrontendLinks Endpoint Link Response[] - Describes Frontend Endpoints associated with this Web Application Firewall policy.
- id string
- The provider-assigned unique ID for this managed resource.
- name string
- Resource name.
- provisioning
State string - Provisioning state of the policy.
- resource
State string - routing
Rule RoutingLinks Rule Link Response[] - Describes Routing Rules associated with this Web Application Firewall policy.
- security
Policy SecurityLinks Policy Link Response[] - Describes Security Policy associated with this Web Application Firewall policy.
- type string
- Resource type.
- etag string
- Gets a unique read-only string that changes whenever the resource is updated.
- frontend_
endpoint_ Sequence[Frontendlinks Endpoint Link Response] - Describes Frontend Endpoints associated with this Web Application Firewall policy.
- id str
- The provider-assigned unique ID for this managed resource.
- name str
- Resource name.
- provisioning_
state str - Provisioning state of the policy.
- resource_
state str - routing_
rule_ Sequence[Routinglinks Rule Link Response] - Describes Routing Rules associated with this Web Application Firewall policy.
- security_
policy_ Sequence[Securitylinks Policy Link Response] - Describes Security Policy associated with this Web Application Firewall policy.
- type str
- Resource type.
- etag str
- Gets a unique read-only string that changes whenever the resource is updated.
- frontend
Endpoint List<Property Map>Links - Describes Frontend Endpoints associated with this Web Application Firewall policy.
- id String
- The provider-assigned unique ID for this managed resource.
- name String
- Resource name.
- provisioning
State String - Provisioning state of the policy.
- resource
State String - routing
Rule List<Property Map>Links - Describes Routing Rules associated with this Web Application Firewall policy.
- security
Policy List<Property Map>Links - Describes Security Policy associated with this Web Application Firewall policy.
- type String
- Resource type.
- etag String
- Gets a unique read-only string that changes whenever the resource is updated.
Supporting Types
ActionType, ActionTypeArgs
- Allow
- Allow
- Block
- Block
- Log
- Log
- Redirect
- Redirect
- Action
Type Allow - Allow
- Action
Type Block - Block
- Action
Type Log - Log
- Action
Type Redirect - Redirect
- Allow
- Allow
- Block
- Block
- Log
- Log
- Redirect
- Redirect
- Allow
- Allow
- Block
- Block
- Log
- Log
- Redirect
- Redirect
- ALLOW
- Allow
- BLOCK
- Block
- LOG
- Log
- REDIRECT
- Redirect
- "Allow"
- Allow
- "Block"
- Block
- "Log"
- Log
- "Redirect"
- Redirect
CustomRule, CustomRuleArgs
- Action
string | Pulumi.
Azure Native. Network. Action Type - Describes what action to be applied when rule matches.
- Match
Conditions List<Pulumi.Azure Native. Network. Inputs. Front Door Match Condition> - List of match conditions.
- Priority int
- Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
- Rule
Type string | Pulumi.Azure Native. Network. Rule Type - Describes type of rule.
- Enabled
State string | Pulumi.Azure Native. Network. Custom Rule Enabled State - Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
- Name string
- Describes the name of the rule.
- Rate
Limit intDuration In Minutes - Time window for resetting the rate limit count. Default is 1 minute.
- Rate
Limit intThreshold - Number of allowed requests per client within the time window.
- Action
string | Action
Type - Describes what action to be applied when rule matches.
- Match
Conditions []FrontDoor Match Condition - List of match conditions.
- Priority int
- Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
- Rule
Type string | RuleType - Describes type of rule.
- Enabled
State string | CustomRule Enabled State - Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
- Name string
- Describes the name of the rule.
- Rate
Limit intDuration In Minutes - Time window for resetting the rate limit count. Default is 1 minute.
- Rate
Limit intThreshold - Number of allowed requests per client within the time window.
- action
String | Action
Type - Describes what action to be applied when rule matches.
- match
Conditions List<FrontDoor Match Condition> - List of match conditions.
- priority Integer
- Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
- rule
Type String | RuleType - Describes type of rule.
- enabled
State String | CustomRule Enabled State - Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
- name String
- Describes the name of the rule.
- rate
Limit IntegerDuration In Minutes - Time window for resetting the rate limit count. Default is 1 minute.
- rate
Limit IntegerThreshold - Number of allowed requests per client within the time window.
- action
string | Action
Type - Describes what action to be applied when rule matches.
- match
Conditions FrontDoor Match Condition[] - List of match conditions.
- priority number
- Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
- rule
Type string | RuleType - Describes type of rule.
- enabled
State string | CustomRule Enabled State - Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
- name string
- Describes the name of the rule.
- rate
Limit numberDuration In Minutes - Time window for resetting the rate limit count. Default is 1 minute.
- rate
Limit numberThreshold - Number of allowed requests per client within the time window.
- action
str | Action
Type - Describes what action to be applied when rule matches.
- match_
conditions Sequence[FrontDoor Match Condition] - List of match conditions.
- priority int
- Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
- rule_
type str | RuleType - Describes type of rule.
- enabled_
state str | CustomRule Enabled State - Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
- name str
- Describes the name of the rule.
- rate_
limit_ intduration_ in_ minutes - Time window for resetting the rate limit count. Default is 1 minute.
- rate_
limit_ intthreshold - Number of allowed requests per client within the time window.
- action String | "Allow" | "Block" | "Log" | "Redirect"
- Describes what action to be applied when rule matches.
- match
Conditions List<Property Map> - List of match conditions.
- priority Number
- Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
- rule
Type String | "MatchRule" | "Rate Limit Rule" - Describes type of rule.
- enabled
State String | "Disabled" | "Enabled" - Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
- name String
- Describes the name of the rule.
- rate
Limit NumberDuration In Minutes - Time window for resetting the rate limit count. Default is 1 minute.
- rate
Limit NumberThreshold - Number of allowed requests per client within the time window.
CustomRuleEnabledState, CustomRuleEnabledStateArgs
- Disabled
- Disabled
- Enabled
- Enabled
- Custom
Rule Enabled State Disabled - Disabled
- Custom
Rule Enabled State Enabled - Enabled
- Disabled
- Disabled
- Enabled
- Enabled
- Disabled
- Disabled
- Enabled
- Enabled
- DISABLED
- Disabled
- ENABLED
- Enabled
- "Disabled"
- Disabled
- "Enabled"
- Enabled
CustomRuleList, CustomRuleListArgs
- Rules
List<Pulumi.
Azure Native. Network. Inputs. Custom Rule> - List of rules
- Rules
[]Custom
Rule - List of rules
- rules
List<Custom
Rule> - List of rules
- rules
Custom
Rule[] - List of rules
- rules
Sequence[Custom
Rule] - List of rules
- rules List<Property Map>
- List of rules
CustomRuleListResponse, CustomRuleListResponseArgs
- Rules
[]Custom
Rule Response - List of rules
- rules
List<Custom
Rule Response> - List of rules
- rules
Custom
Rule Response[] - List of rules
- rules
Sequence[Custom
Rule Response] - List of rules
- rules List<Property Map>
- List of rules
CustomRuleResponse, CustomRuleResponseArgs
- Action string
- Describes what action to be applied when rule matches.
- Match
Conditions List<Pulumi.Azure Native. Network. Inputs. Front Door Match Condition Response> - List of match conditions.
- Priority int
- Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
- Rule
Type string - Describes type of rule.
- Enabled
State string - Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
- Name string
- Describes the name of the rule.
- Rate
Limit intDuration In Minutes - Time window for resetting the rate limit count. Default is 1 minute.
- Rate
Limit intThreshold - Number of allowed requests per client within the time window.
- Action string
- Describes what action to be applied when rule matches.
- Match
Conditions []FrontDoor Match Condition Response - List of match conditions.
- Priority int
- Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
- Rule
Type string - Describes type of rule.
- Enabled
State string - Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
- Name string
- Describes the name of the rule.
- Rate
Limit intDuration In Minutes - Time window for resetting the rate limit count. Default is 1 minute.
- Rate
Limit intThreshold - Number of allowed requests per client within the time window.
- action String
- Describes what action to be applied when rule matches.
- match
Conditions List<FrontDoor Match Condition Response> - List of match conditions.
- priority Integer
- Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
- rule
Type String - Describes type of rule.
- enabled
State String - Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
- name String
- Describes the name of the rule.
- rate
Limit IntegerDuration In Minutes - Time window for resetting the rate limit count. Default is 1 minute.
- rate
Limit IntegerThreshold - Number of allowed requests per client within the time window.
- action string
- Describes what action to be applied when rule matches.
- match
Conditions FrontDoor Match Condition Response[] - List of match conditions.
- priority number
- Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
- rule
Type string - Describes type of rule.
- enabled
State string - Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
- name string
- Describes the name of the rule.
- rate
Limit numberDuration In Minutes - Time window for resetting the rate limit count. Default is 1 minute.
- rate
Limit numberThreshold - Number of allowed requests per client within the time window.
- action str
- Describes what action to be applied when rule matches.
- match_
conditions Sequence[FrontDoor Match Condition Response] - List of match conditions.
- priority int
- Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
- rule_
type str - Describes type of rule.
- enabled_
state str - Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
- name str
- Describes the name of the rule.
- rate_
limit_ intduration_ in_ minutes - Time window for resetting the rate limit count. Default is 1 minute.
- rate_
limit_ intthreshold - Number of allowed requests per client within the time window.
- action String
- Describes what action to be applied when rule matches.
- match
Conditions List<Property Map> - List of match conditions.
- priority Number
- Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
- rule
Type String - Describes type of rule.
- enabled
State String - Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
- name String
- Describes the name of the rule.
- rate
Limit NumberDuration In Minutes - Time window for resetting the rate limit count. Default is 1 minute.
- rate
Limit NumberThreshold - Number of allowed requests per client within the time window.
FrontDoorManagedRuleGroupOverride, FrontDoorManagedRuleGroupOverrideArgs
- Rule
Group stringName - Describes the managed rule group to override.
- Exclusions
List<Pulumi.
Azure Native. Network. Inputs. Managed Rule Exclusion> - Describes the exclusions that are applied to all rules in the group.
- Rules
List<Pulumi.
Azure Native. Network. Inputs. Front Door Managed Rule Override> - List of rules that will be disabled. If none specified, all rules in the group will be disabled.
- Rule
Group stringName - Describes the managed rule group to override.
- Exclusions
[]Managed
Rule Exclusion - Describes the exclusions that are applied to all rules in the group.
- Rules
[]Front
Door Managed Rule Override - List of rules that will be disabled. If none specified, all rules in the group will be disabled.
- rule
Group StringName - Describes the managed rule group to override.
- exclusions
List<Managed
Rule Exclusion> - Describes the exclusions that are applied to all rules in the group.
- rules
List<Front
Door Managed Rule Override> - List of rules that will be disabled. If none specified, all rules in the group will be disabled.
- rule
Group stringName - Describes the managed rule group to override.
- exclusions
Managed
Rule Exclusion[] - Describes the exclusions that are applied to all rules in the group.
- rules
Front
Door Managed Rule Override[] - List of rules that will be disabled. If none specified, all rules in the group will be disabled.
- rule_
group_ strname - Describes the managed rule group to override.
- exclusions
Sequence[Managed
Rule Exclusion] - Describes the exclusions that are applied to all rules in the group.
- rules
Sequence[Front
Door Managed Rule Override] - List of rules that will be disabled. If none specified, all rules in the group will be disabled.
- rule
Group StringName - Describes the managed rule group to override.
- exclusions List<Property Map>
- Describes the exclusions that are applied to all rules in the group.
- rules List<Property Map>
- List of rules that will be disabled. If none specified, all rules in the group will be disabled.
FrontDoorManagedRuleGroupOverrideResponse, FrontDoorManagedRuleGroupOverrideResponseArgs
- Rule
Group stringName - Describes the managed rule group to override.
- Exclusions
List<Pulumi.
Azure Native. Network. Inputs. Managed Rule Exclusion Response> - Describes the exclusions that are applied to all rules in the group.
- Rules
List<Pulumi.
Azure Native. Network. Inputs. Front Door Managed Rule Override Response> - List of rules that will be disabled. If none specified, all rules in the group will be disabled.
- Rule
Group stringName - Describes the managed rule group to override.
- Exclusions
[]Managed
Rule Exclusion Response - Describes the exclusions that are applied to all rules in the group.
- Rules
[]Front
Door Managed Rule Override Response - List of rules that will be disabled. If none specified, all rules in the group will be disabled.
- rule
Group StringName - Describes the managed rule group to override.
- exclusions
List<Managed
Rule Exclusion Response> - Describes the exclusions that are applied to all rules in the group.
- rules
List<Front
Door Managed Rule Override Response> - List of rules that will be disabled. If none specified, all rules in the group will be disabled.
- rule
Group stringName - Describes the managed rule group to override.
- exclusions
Managed
Rule Exclusion Response[] - Describes the exclusions that are applied to all rules in the group.
- rules
Front
Door Managed Rule Override Response[] - List of rules that will be disabled. If none specified, all rules in the group will be disabled.
- rule_
group_ strname - Describes the managed rule group to override.
- exclusions
Sequence[Managed
Rule Exclusion Response] - Describes the exclusions that are applied to all rules in the group.
- rules
Sequence[Front
Door Managed Rule Override Response] - List of rules that will be disabled. If none specified, all rules in the group will be disabled.
- rule
Group StringName - Describes the managed rule group to override.
- exclusions List<Property Map>
- Describes the exclusions that are applied to all rules in the group.
- rules List<Property Map>
- List of rules that will be disabled. If none specified, all rules in the group will be disabled.
FrontDoorManagedRuleOverride, FrontDoorManagedRuleOverrideArgs
- Rule
Id string - Identifier for the managed rule.
- Action
string | Pulumi.
Azure Native. Network. Action Type - Describes the override action to be applied when rule matches.
- Enabled
State string | Pulumi.Azure Native. Network. Managed Rule Enabled State - Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
- Exclusions
List<Pulumi.
Azure Native. Network. Inputs. Managed Rule Exclusion> - Describes the exclusions that are applied to this specific rule.
- Rule
Id string - Identifier for the managed rule.
- Action
string | Action
Type - Describes the override action to be applied when rule matches.
- Enabled
State string | ManagedRule Enabled State - Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
- Exclusions
[]Managed
Rule Exclusion - Describes the exclusions that are applied to this specific rule.
- rule
Id String - Identifier for the managed rule.
- action
String | Action
Type - Describes the override action to be applied when rule matches.
- enabled
State String | ManagedRule Enabled State - Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
- exclusions
List<Managed
Rule Exclusion> - Describes the exclusions that are applied to this specific rule.
- rule
Id string - Identifier for the managed rule.
- action
string | Action
Type - Describes the override action to be applied when rule matches.
- enabled
State string | ManagedRule Enabled State - Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
- exclusions
Managed
Rule Exclusion[] - Describes the exclusions that are applied to this specific rule.
- rule_
id str - Identifier for the managed rule.
- action
str | Action
Type - Describes the override action to be applied when rule matches.
- enabled_
state str | ManagedRule Enabled State - Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
- exclusions
Sequence[Managed
Rule Exclusion] - Describes the exclusions that are applied to this specific rule.
- rule
Id String - Identifier for the managed rule.
- action String | "Allow" | "Block" | "Log" | "Redirect"
- Describes the override action to be applied when rule matches.
- enabled
State String | "Disabled" - Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
- exclusions List<Property Map>
- Describes the exclusions that are applied to this specific rule.
FrontDoorManagedRuleOverrideResponse, FrontDoorManagedRuleOverrideResponseArgs
- Rule
Id string - Identifier for the managed rule.
- Action string
- Describes the override action to be applied when rule matches.
- Enabled
State string - Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
- Exclusions
List<Pulumi.
Azure Native. Network. Inputs. Managed Rule Exclusion Response> - Describes the exclusions that are applied to this specific rule.
- Rule
Id string - Identifier for the managed rule.
- Action string
- Describes the override action to be applied when rule matches.
- Enabled
State string - Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
- Exclusions
[]Managed
Rule Exclusion Response - Describes the exclusions that are applied to this specific rule.
- rule
Id String - Identifier for the managed rule.
- action String
- Describes the override action to be applied when rule matches.
- enabled
State String - Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
- exclusions
List<Managed
Rule Exclusion Response> - Describes the exclusions that are applied to this specific rule.
- rule
Id string - Identifier for the managed rule.
- action string
- Describes the override action to be applied when rule matches.
- enabled
State string - Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
- exclusions
Managed
Rule Exclusion Response[] - Describes the exclusions that are applied to this specific rule.
- rule_
id str - Identifier for the managed rule.
- action str
- Describes the override action to be applied when rule matches.
- enabled_
state str - Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
- exclusions
Sequence[Managed
Rule Exclusion Response] - Describes the exclusions that are applied to this specific rule.
- rule
Id String - Identifier for the managed rule.
- action String
- Describes the override action to be applied when rule matches.
- enabled
State String - Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
- exclusions List<Property Map>
- Describes the exclusions that are applied to this specific rule.
FrontDoorManagedRuleSet, FrontDoorManagedRuleSetArgs
- Rule
Set stringType - Defines the rule set type to use.
- Rule
Set stringVersion - Defines the version of the rule set to use.
- Exclusions
List<Pulumi.
Azure Native. Network. Inputs. Managed Rule Exclusion> - Describes the exclusions that are applied to all rules in the set.
- Rule
Group List<Pulumi.Overrides Azure Native. Network. Inputs. Front Door Managed Rule Group Override> - Defines the rule group overrides to apply to the rule set.
- Rule
Set string | Pulumi.Action Azure Native. Network. Managed Rule Set Action Type - Defines the action to take when a managed rule set score threshold is met.
- Rule
Set stringType - Defines the rule set type to use.
- Rule
Set stringVersion - Defines the version of the rule set to use.
- Exclusions
[]Managed
Rule Exclusion - Describes the exclusions that are applied to all rules in the set.
- Rule
Group []FrontOverrides Door Managed Rule Group Override - Defines the rule group overrides to apply to the rule set.
- Rule
Set string | ManagedAction Rule Set Action Type - Defines the action to take when a managed rule set score threshold is met.
- rule
Set StringType - Defines the rule set type to use.
- rule
Set StringVersion - Defines the version of the rule set to use.
- exclusions
List<Managed
Rule Exclusion> - Describes the exclusions that are applied to all rules in the set.
- rule
Group List<FrontOverrides Door Managed Rule Group Override> - Defines the rule group overrides to apply to the rule set.
- rule
Set String | ManagedAction Rule Set Action Type - Defines the action to take when a managed rule set score threshold is met.
- rule
Set stringType - Defines the rule set type to use.
- rule
Set stringVersion - Defines the version of the rule set to use.
- exclusions
Managed
Rule Exclusion[] - Describes the exclusions that are applied to all rules in the set.
- rule
Group FrontOverrides Door Managed Rule Group Override[] - Defines the rule group overrides to apply to the rule set.
- rule
Set string | ManagedAction Rule Set Action Type - Defines the action to take when a managed rule set score threshold is met.
- rule_
set_ strtype - Defines the rule set type to use.
- rule_
set_ strversion - Defines the version of the rule set to use.
- exclusions
Sequence[Managed
Rule Exclusion] - Describes the exclusions that are applied to all rules in the set.
- rule_
group_ Sequence[Frontoverrides Door Managed Rule Group Override] - Defines the rule group overrides to apply to the rule set.
- rule_
set_ str | Managedaction Rule Set Action Type - Defines the action to take when a managed rule set score threshold is met.
- rule
Set StringType - Defines the rule set type to use.
- rule
Set StringVersion - Defines the version of the rule set to use.
- exclusions List<Property Map>
- Describes the exclusions that are applied to all rules in the set.
- rule
Group List<Property Map>Overrides - Defines the rule group overrides to apply to the rule set.
- rule
Set String | "Block" | "Log" | "Redirect"Action - Defines the action to take when a managed rule set score threshold is met.
FrontDoorManagedRuleSetResponse, FrontDoorManagedRuleSetResponseArgs
- Rule
Set stringType - Defines the rule set type to use.
- Rule
Set stringVersion - Defines the version of the rule set to use.
- Exclusions
List<Pulumi.
Azure Native. Network. Inputs. Managed Rule Exclusion Response> - Describes the exclusions that are applied to all rules in the set.
- Rule
Group List<Pulumi.Overrides Azure Native. Network. Inputs. Front Door Managed Rule Group Override Response> - Defines the rule group overrides to apply to the rule set.
- Rule
Set stringAction - Defines the action to take when a managed rule set score threshold is met.
- Rule
Set stringType - Defines the rule set type to use.
- Rule
Set stringVersion - Defines the version of the rule set to use.
- Exclusions
[]Managed
Rule Exclusion Response - Describes the exclusions that are applied to all rules in the set.
- Rule
Group []FrontOverrides Door Managed Rule Group Override Response - Defines the rule group overrides to apply to the rule set.
- Rule
Set stringAction - Defines the action to take when a managed rule set score threshold is met.
- rule
Set StringType - Defines the rule set type to use.
- rule
Set StringVersion - Defines the version of the rule set to use.
- exclusions
List<Managed
Rule Exclusion Response> - Describes the exclusions that are applied to all rules in the set.
- rule
Group List<FrontOverrides Door Managed Rule Group Override Response> - Defines the rule group overrides to apply to the rule set.
- rule
Set StringAction - Defines the action to take when a managed rule set score threshold is met.
- rule
Set stringType - Defines the rule set type to use.
- rule
Set stringVersion - Defines the version of the rule set to use.
- exclusions
Managed
Rule Exclusion Response[] - Describes the exclusions that are applied to all rules in the set.
- rule
Group FrontOverrides Door Managed Rule Group Override Response[] - Defines the rule group overrides to apply to the rule set.
- rule
Set stringAction - Defines the action to take when a managed rule set score threshold is met.
- rule_
set_ strtype - Defines the rule set type to use.
- rule_
set_ strversion - Defines the version of the rule set to use.
- exclusions
Sequence[Managed
Rule Exclusion Response] - Describes the exclusions that are applied to all rules in the set.
- rule_
group_ Sequence[Frontoverrides Door Managed Rule Group Override Response] - Defines the rule group overrides to apply to the rule set.
- rule_
set_ straction - Defines the action to take when a managed rule set score threshold is met.
- rule
Set StringType - Defines the rule set type to use.
- rule
Set StringVersion - Defines the version of the rule set to use.
- exclusions List<Property Map>
- Describes the exclusions that are applied to all rules in the set.
- rule
Group List<Property Map>Overrides - Defines the rule group overrides to apply to the rule set.
- rule
Set StringAction - Defines the action to take when a managed rule set score threshold is met.
FrontDoorMatchCondition, FrontDoorMatchConditionArgs
- Match
Value List<string> - List of possible match values.
- Match
Variable string | Pulumi.Azure Native. Network. Front Door Match Variable - Request variable to compare with.
- Operator
string | Pulumi.
Azure Native. Network. Operator - Comparison type to use for matching with the variable value.
- Negate
Condition bool - Describes if the result of this condition should be negated.
- Selector string
- Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
- Transforms
List<Union<string, Pulumi.
Azure Native. Network. Transform Type>> - List of transforms.
- Match
Value []string - List of possible match values.
- Match
Variable string | FrontDoor Match Variable - Request variable to compare with.
- Operator string | Operator
- Comparison type to use for matching with the variable value.
- Negate
Condition bool - Describes if the result of this condition should be negated.
- Selector string
- Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
- Transforms []string
- List of transforms.
- match
Value List<String> - List of possible match values.
- match
Variable String | FrontDoor Match Variable - Request variable to compare with.
- operator String | Operator
- Comparison type to use for matching with the variable value.
- negate
Condition Boolean - Describes if the result of this condition should be negated.
- selector String
- Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
- transforms
List<Either<String,Transform
Type>> - List of transforms.
- match
Value string[] - List of possible match values.
- match
Variable string | FrontDoor Match Variable - Request variable to compare with.
- operator string | Operator
- Comparison type to use for matching with the variable value.
- negate
Condition boolean - Describes if the result of this condition should be negated.
- selector string
- Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
- transforms
(string | Transform
Type)[] - List of transforms.
- match_
value Sequence[str] - List of possible match values.
- match_
variable str | FrontDoor Match Variable - Request variable to compare with.
- operator str | Operator
- Comparison type to use for matching with the variable value.
- negate_
condition bool - Describes if the result of this condition should be negated.
- selector str
- Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
- transforms
Sequence[Union[str, Transform
Type]] - List of transforms.
- match
Value List<String> - List of possible match values.
- match
Variable String | "RemoteAddr" | "Request Method" | "Query String" | "Post Args" | "Request Uri" | "Request Header" | "Request Body" | "Cookies" | "Socket Addr" - Request variable to compare with.
- operator
String | "Any" | "IPMatch" | "Geo
Match" | "Equal" | "Contains" | "Less Than" | "Greater Than" | "Less Than Or Equal" | "Greater Than Or Equal" | "Begins With" | "Ends With" | "Reg Ex" - Comparison type to use for matching with the variable value.
- negate
Condition Boolean - Describes if the result of this condition should be negated.
- selector String
- Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
- transforms
List<String | "Lowercase" | "Uppercase" | "Trim" | "Url
Decode" | "Url Encode" | "Remove Nulls"> - List of transforms.
FrontDoorMatchConditionResponse, FrontDoorMatchConditionResponseArgs
- Match
Value List<string> - List of possible match values.
- Match
Variable string - Request variable to compare with.
- Operator string
- Comparison type to use for matching with the variable value.
- Negate
Condition bool - Describes if the result of this condition should be negated.
- Selector string
- Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
- Transforms List<string>
- List of transforms.
- Match
Value []string - List of possible match values.
- Match
Variable string - Request variable to compare with.
- Operator string
- Comparison type to use for matching with the variable value.
- Negate
Condition bool - Describes if the result of this condition should be negated.
- Selector string
- Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
- Transforms []string
- List of transforms.
- match
Value List<String> - List of possible match values.
- match
Variable String - Request variable to compare with.
- operator String
- Comparison type to use for matching with the variable value.
- negate
Condition Boolean - Describes if the result of this condition should be negated.
- selector String
- Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
- transforms List<String>
- List of transforms.
- match
Value string[] - List of possible match values.
- match
Variable string - Request variable to compare with.
- operator string
- Comparison type to use for matching with the variable value.
- negate
Condition boolean - Describes if the result of this condition should be negated.
- selector string
- Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
- transforms string[]
- List of transforms.
- match_
value Sequence[str] - List of possible match values.
- match_
variable str - Request variable to compare with.
- operator str
- Comparison type to use for matching with the variable value.
- negate_
condition bool - Describes if the result of this condition should be negated.
- selector str
- Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
- transforms Sequence[str]
- List of transforms.
- match
Value List<String> - List of possible match values.
- match
Variable String - Request variable to compare with.
- operator String
- Comparison type to use for matching with the variable value.
- negate
Condition Boolean - Describes if the result of this condition should be negated.
- selector String
- Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
- transforms List<String>
- List of transforms.
FrontDoorMatchVariable, FrontDoorMatchVariableArgs
- Remote
Addr - RemoteAddr
- Request
Method - RequestMethod
- Query
String - QueryString
- Post
Args - PostArgs
- Request
Uri - RequestUri
- Request
Header - RequestHeader
- Request
Body - RequestBody
- Cookies
- Cookies
- Socket
Addr - SocketAddr
- Front
Door Match Variable Remote Addr - RemoteAddr
- Front
Door Match Variable Request Method - RequestMethod
- Front
Door Match Variable Query String - QueryString
- Front
Door Match Variable Post Args - PostArgs
- Front
Door Match Variable Request Uri - RequestUri
- Front
Door Match Variable Request Header - RequestHeader
- Front
Door Match Variable Request Body - RequestBody
- Front
Door Match Variable Cookies - Cookies
- Front
Door Match Variable Socket Addr - SocketAddr
- Remote
Addr - RemoteAddr
- Request
Method - RequestMethod
- Query
String - QueryString
- Post
Args - PostArgs
- Request
Uri - RequestUri
- Request
Header - RequestHeader
- Request
Body - RequestBody
- Cookies
- Cookies
- Socket
Addr - SocketAddr
- Remote
Addr - RemoteAddr
- Request
Method - RequestMethod
- Query
String - QueryString
- Post
Args - PostArgs
- Request
Uri - RequestUri
- Request
Header - RequestHeader
- Request
Body - RequestBody
- Cookies
- Cookies
- Socket
Addr - SocketAddr
- REMOTE_ADDR
- RemoteAddr
- REQUEST_METHOD
- RequestMethod
- QUERY_STRING
- QueryString
- POST_ARGS
- PostArgs
- REQUEST_URI
- RequestUri
- REQUEST_HEADER
- RequestHeader
- REQUEST_BODY
- RequestBody
- COOKIES
- Cookies
- SOCKET_ADDR
- SocketAddr
- "Remote
Addr" - RemoteAddr
- "Request
Method" - RequestMethod
- "Query
String" - QueryString
- "Post
Args" - PostArgs
- "Request
Uri" - RequestUri
- "Request
Header" - RequestHeader
- "Request
Body" - RequestBody
- "Cookies"
- Cookies
- "Socket
Addr" - SocketAddr
FrontDoorPolicySettings, FrontDoorPolicySettingsArgs
- Custom
Block stringResponse Body - If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
- Custom
Block intResponse Status Code - If the action type is block, customer can override the response status code.
- Enabled
State string | Pulumi.Azure Native. Network. Policy Enabled State - Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
- Mode
string | Pulumi.
Azure Native. Network. Policy Mode - Describes if it is in detection mode or prevention mode at policy level.
- Redirect
Url string - If action type is redirect, this field represents redirect URL for the client.
- Request
Body string | Pulumi.Check Azure Native. Network. Policy Request Body Check - Describes if policy managed rules will inspect the request body content.
- Custom
Block stringResponse Body - If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
- Custom
Block intResponse Status Code - If the action type is block, customer can override the response status code.
- Enabled
State string | PolicyEnabled State - Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
- Mode
string | Policy
Mode - Describes if it is in detection mode or prevention mode at policy level.
- Redirect
Url string - If action type is redirect, this field represents redirect URL for the client.
- Request
Body string | PolicyCheck Request Body Check - Describes if policy managed rules will inspect the request body content.
- custom
Block StringResponse Body - If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
- custom
Block IntegerResponse Status Code - If the action type is block, customer can override the response status code.
- enabled
State String | PolicyEnabled State - Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
- mode
String | Policy
Mode - Describes if it is in detection mode or prevention mode at policy level.
- redirect
Url String - If action type is redirect, this field represents redirect URL for the client.
- request
Body String | PolicyCheck Request Body Check - Describes if policy managed rules will inspect the request body content.
- custom
Block stringResponse Body - If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
- custom
Block numberResponse Status Code - If the action type is block, customer can override the response status code.
- enabled
State string | PolicyEnabled State - Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
- mode
string | Policy
Mode - Describes if it is in detection mode or prevention mode at policy level.
- redirect
Url string - If action type is redirect, this field represents redirect URL for the client.
- request
Body string | PolicyCheck Request Body Check - Describes if policy managed rules will inspect the request body content.
- custom_
block_ strresponse_ body - If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
- custom_
block_ intresponse_ status_ code - If the action type is block, customer can override the response status code.
- enabled_
state str | PolicyEnabled State - Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
- mode
str | Policy
Mode - Describes if it is in detection mode or prevention mode at policy level.
- redirect_
url str - If action type is redirect, this field represents redirect URL for the client.
- request_
body_ str | Policycheck Request Body Check - Describes if policy managed rules will inspect the request body content.
- custom
Block StringResponse Body - If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
- custom
Block NumberResponse Status Code - If the action type is block, customer can override the response status code.
- enabled
State String | "Disabled" | "Enabled" - Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
- mode String | "Prevention" | "Detection"
- Describes if it is in detection mode or prevention mode at policy level.
- redirect
Url String - If action type is redirect, this field represents redirect URL for the client.
- request
Body String | "Disabled" | "Enabled"Check - Describes if policy managed rules will inspect the request body content.
FrontDoorPolicySettingsResponse, FrontDoorPolicySettingsResponseArgs
- Custom
Block stringResponse Body - If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
- Custom
Block intResponse Status Code - If the action type is block, customer can override the response status code.
- Enabled
State string - Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
- Mode string
- Describes if it is in detection mode or prevention mode at policy level.
- Redirect
Url string - If action type is redirect, this field represents redirect URL for the client.
- Request
Body stringCheck - Describes if policy managed rules will inspect the request body content.
- Custom
Block stringResponse Body - If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
- Custom
Block intResponse Status Code - If the action type is block, customer can override the response status code.
- Enabled
State string - Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
- Mode string
- Describes if it is in detection mode or prevention mode at policy level.
- Redirect
Url string - If action type is redirect, this field represents redirect URL for the client.
- Request
Body stringCheck - Describes if policy managed rules will inspect the request body content.
- custom
Block StringResponse Body - If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
- custom
Block IntegerResponse Status Code - If the action type is block, customer can override the response status code.
- enabled
State String - Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
- mode String
- Describes if it is in detection mode or prevention mode at policy level.
- redirect
Url String - If action type is redirect, this field represents redirect URL for the client.
- request
Body StringCheck - Describes if policy managed rules will inspect the request body content.
- custom
Block stringResponse Body - If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
- custom
Block numberResponse Status Code - If the action type is block, customer can override the response status code.
- enabled
State string - Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
- mode string
- Describes if it is in detection mode or prevention mode at policy level.
- redirect
Url string - If action type is redirect, this field represents redirect URL for the client.
- request
Body stringCheck - Describes if policy managed rules will inspect the request body content.
- custom_
block_ strresponse_ body - If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
- custom_
block_ intresponse_ status_ code - If the action type is block, customer can override the response status code.
- enabled_
state str - Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
- mode str
- Describes if it is in detection mode or prevention mode at policy level.
- redirect_
url str - If action type is redirect, this field represents redirect URL for the client.
- request_
body_ strcheck - Describes if policy managed rules will inspect the request body content.
- custom
Block StringResponse Body - If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
- custom
Block NumberResponse Status Code - If the action type is block, customer can override the response status code.
- enabled
State String - Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
- mode String
- Describes if it is in detection mode or prevention mode at policy level.
- redirect
Url String - If action type is redirect, this field represents redirect URL for the client.
- request
Body StringCheck - Describes if policy managed rules will inspect the request body content.
FrontendEndpointLinkResponse, FrontendEndpointLinkResponseArgs
- Id string
- Resource ID.
- Id string
- Resource ID.
- id String
- Resource ID.
- id string
- Resource ID.
- id str
- Resource ID.
- id String
- Resource ID.
ManagedRuleEnabledState, ManagedRuleEnabledStateArgs
- Disabled
- Disabled
- Managed
Rule Enabled State Disabled - Disabled
- Disabled
- Disabled
- Disabled
- Disabled
- DISABLED
- Disabled
- "Disabled"
- Disabled
ManagedRuleExclusion, ManagedRuleExclusionArgs
- Match
Variable string | Pulumi.Azure Native. Network. Managed Rule Exclusion Match Variable - The variable type to be excluded.
- Selector string
- Selector value for which elements in the collection this exclusion applies to.
- Selector
Match string | Pulumi.Operator Azure Native. Network. Managed Rule Exclusion Selector Match Operator - Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
- Match
Variable string | ManagedRule Exclusion Match Variable - The variable type to be excluded.
- Selector string
- Selector value for which elements in the collection this exclusion applies to.
- Selector
Match string | ManagedOperator Rule Exclusion Selector Match Operator - Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
- match
Variable String | ManagedRule Exclusion Match Variable - The variable type to be excluded.
- selector String
- Selector value for which elements in the collection this exclusion applies to.
- selector
Match String | ManagedOperator Rule Exclusion Selector Match Operator - Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
- match
Variable string | ManagedRule Exclusion Match Variable - The variable type to be excluded.
- selector string
- Selector value for which elements in the collection this exclusion applies to.
- selector
Match string | ManagedOperator Rule Exclusion Selector Match Operator - Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
- match_
variable str | ManagedRule Exclusion Match Variable - The variable type to be excluded.
- selector str
- Selector value for which elements in the collection this exclusion applies to.
- selector_
match_ str | Managedoperator Rule Exclusion Selector Match Operator - Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
- match
Variable String | "RequestHeader Names" | "Request Cookie Names" | "Query String Arg Names" | "Request Body Post Arg Names" | "Request Body Json Arg Names" - The variable type to be excluded.
- selector String
- Selector value for which elements in the collection this exclusion applies to.
- selector
Match String | "Equals" | "Contains" | "StartsOperator With" | "Ends With" | "Equals Any" - Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
ManagedRuleExclusionMatchVariable, ManagedRuleExclusionMatchVariableArgs
- Request
Header Names - RequestHeaderNames
- Request
Cookie Names - RequestCookieNames
- Query
String Arg Names - QueryStringArgNames
- Request
Body Post Arg Names - RequestBodyPostArgNames
- Request
Body Json Arg Names - RequestBodyJsonArgNames
- Managed
Rule Exclusion Match Variable Request Header Names - RequestHeaderNames
- Managed
Rule Exclusion Match Variable Request Cookie Names - RequestCookieNames
- Managed
Rule Exclusion Match Variable Query String Arg Names - QueryStringArgNames
- Managed
Rule Exclusion Match Variable Request Body Post Arg Names - RequestBodyPostArgNames
- Managed
Rule Exclusion Match Variable Request Body Json Arg Names - RequestBodyJsonArgNames
- Request
Header Names - RequestHeaderNames
- Request
Cookie Names - RequestCookieNames
- Query
String Arg Names - QueryStringArgNames
- Request
Body Post Arg Names - RequestBodyPostArgNames
- Request
Body Json Arg Names - RequestBodyJsonArgNames
- Request
Header Names - RequestHeaderNames
- Request
Cookie Names - RequestCookieNames
- Query
String Arg Names - QueryStringArgNames
- Request
Body Post Arg Names - RequestBodyPostArgNames
- Request
Body Json Arg Names - RequestBodyJsonArgNames
- REQUEST_HEADER_NAMES
- RequestHeaderNames
- REQUEST_COOKIE_NAMES
- RequestCookieNames
- QUERY_STRING_ARG_NAMES
- QueryStringArgNames
- REQUEST_BODY_POST_ARG_NAMES
- RequestBodyPostArgNames
- REQUEST_BODY_JSON_ARG_NAMES
- RequestBodyJsonArgNames
- "Request
Header Names" - RequestHeaderNames
- "Request
Cookie Names" - RequestCookieNames
- "Query
String Arg Names" - QueryStringArgNames
- "Request
Body Post Arg Names" - RequestBodyPostArgNames
- "Request
Body Json Arg Names" - RequestBodyJsonArgNames
ManagedRuleExclusionResponse, ManagedRuleExclusionResponseArgs
- Match
Variable string - The variable type to be excluded.
- Selector string
- Selector value for which elements in the collection this exclusion applies to.
- Selector
Match stringOperator - Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
- Match
Variable string - The variable type to be excluded.
- Selector string
- Selector value for which elements in the collection this exclusion applies to.
- Selector
Match stringOperator - Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
- match
Variable String - The variable type to be excluded.
- selector String
- Selector value for which elements in the collection this exclusion applies to.
- selector
Match StringOperator - Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
- match
Variable string - The variable type to be excluded.
- selector string
- Selector value for which elements in the collection this exclusion applies to.
- selector
Match stringOperator - Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
- match_
variable str - The variable type to be excluded.
- selector str
- Selector value for which elements in the collection this exclusion applies to.
- selector_
match_ stroperator - Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
- match
Variable String - The variable type to be excluded.
- selector String
- Selector value for which elements in the collection this exclusion applies to.
- selector
Match StringOperator - Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
ManagedRuleExclusionSelectorMatchOperator, ManagedRuleExclusionSelectorMatchOperatorArgs
- Equals
Value - Equals
- Contains
- Contains
- Starts
With - StartsWith
- Ends
With - EndsWith
- Equals
Any - EqualsAny
- Managed
Rule Exclusion Selector Match Operator Equals - Equals
- Managed
Rule Exclusion Selector Match Operator Contains - Contains
- Managed
Rule Exclusion Selector Match Operator Starts With - StartsWith
- Managed
Rule Exclusion Selector Match Operator Ends With - EndsWith
- Managed
Rule Exclusion Selector Match Operator Equals Any - EqualsAny
- Equals
- Equals
- Contains
- Contains
- Starts
With - StartsWith
- Ends
With - EndsWith
- Equals
Any - EqualsAny
- Equals
- Equals
- Contains
- Contains
- Starts
With - StartsWith
- Ends
With - EndsWith
- Equals
Any - EqualsAny
- EQUALS
- Equals
- CONTAINS
- Contains
- STARTS_WITH
- StartsWith
- ENDS_WITH
- EndsWith
- EQUALS_ANY
- EqualsAny
- "Equals"
- Equals
- "Contains"
- Contains
- "Starts
With" - StartsWith
- "Ends
With" - EndsWith
- "Equals
Any" - EqualsAny
ManagedRuleSetActionType, ManagedRuleSetActionTypeArgs
- Block
- Block
- Log
- Log
- Redirect
- Redirect
- Managed
Rule Set Action Type Block - Block
- Managed
Rule Set Action Type Log - Log
- Managed
Rule Set Action Type Redirect - Redirect
- Block
- Block
- Log
- Log
- Redirect
- Redirect
- Block
- Block
- Log
- Log
- Redirect
- Redirect
- BLOCK
- Block
- LOG
- Log
- REDIRECT
- Redirect
- "Block"
- Block
- "Log"
- Log
- "Redirect"
- Redirect
ManagedRuleSetList, ManagedRuleSetListArgs
- Managed
Rule []FrontSets Door Managed Rule Set - List of rule sets.
- managed
Rule List<FrontSets Door Managed Rule Set> - List of rule sets.
- managed
Rule FrontSets Door Managed Rule Set[] - List of rule sets.
- managed_
rule_ Sequence[Frontsets Door Managed Rule Set] - List of rule sets.
- managed
Rule List<Property Map>Sets - List of rule sets.
ManagedRuleSetListResponse, ManagedRuleSetListResponseArgs
- Managed
Rule []FrontSets Door Managed Rule Set Response - List of rule sets.
- managed
Rule List<FrontSets Door Managed Rule Set Response> - List of rule sets.
- managed
Rule FrontSets Door Managed Rule Set Response[] - List of rule sets.
- managed_
rule_ Sequence[Frontsets Door Managed Rule Set Response] - List of rule sets.
- managed
Rule List<Property Map>Sets - List of rule sets.
Operator, OperatorArgs
- Any
- Any
- IPMatch
- IPMatch
- Geo
Match - GeoMatch
- Equal
- Equal
- Contains
- Contains
- Less
Than - LessThan
- Greater
Than - GreaterThan
- Less
Than Or Equal - LessThanOrEqual
- Greater
Than Or Equal - GreaterThanOrEqual
- Begins
With - BeginsWith
- Ends
With - EndsWith
- Reg
Ex - RegEx
- Operator
Any - Any
- Operator
IPMatch - IPMatch
- Operator
Geo Match - GeoMatch
- Operator
Equal - Equal
- Operator
Contains - Contains
- Operator
Less Than - LessThan
- Operator
Greater Than - GreaterThan
- Operator
Less Than Or Equal - LessThanOrEqual
- Operator
Greater Than Or Equal - GreaterThanOrEqual
- Operator
Begins With - BeginsWith
- Operator
Ends With - EndsWith
- Operator
Reg Ex - RegEx
- Any
- Any
- IPMatch
- IPMatch
- Geo
Match - GeoMatch
- Equal
- Equal
- Contains
- Contains
- Less
Than - LessThan
- Greater
Than - GreaterThan
- Less
Than Or Equal - LessThanOrEqual
- Greater
Than Or Equal - GreaterThanOrEqual
- Begins
With - BeginsWith
- Ends
With - EndsWith
- Reg
Ex - RegEx
- Any
- Any
- IPMatch
- IPMatch
- Geo
Match - GeoMatch
- Equal
- Equal
- Contains
- Contains
- Less
Than - LessThan
- Greater
Than - GreaterThan
- Less
Than Or Equal - LessThanOrEqual
- Greater
Than Or Equal - GreaterThanOrEqual
- Begins
With - BeginsWith
- Ends
With - EndsWith
- Reg
Ex - RegEx
- ANY
- Any
- IP_MATCH
- IPMatch
- GEO_MATCH
- GeoMatch
- EQUAL
- Equal
- CONTAINS
- Contains
- LESS_THAN
- LessThan
- GREATER_THAN
- GreaterThan
- LESS_THAN_OR_EQUAL
- LessThanOrEqual
- GREATER_THAN_OR_EQUAL
- GreaterThanOrEqual
- BEGINS_WITH
- BeginsWith
- ENDS_WITH
- EndsWith
- REG_EX
- RegEx
- "Any"
- Any
- "IPMatch"
- IPMatch
- "Geo
Match" - GeoMatch
- "Equal"
- Equal
- "Contains"
- Contains
- "Less
Than" - LessThan
- "Greater
Than" - GreaterThan
- "Less
Than Or Equal" - LessThanOrEqual
- "Greater
Than Or Equal" - GreaterThanOrEqual
- "Begins
With" - BeginsWith
- "Ends
With" - EndsWith
- "Reg
Ex" - RegEx
PolicyEnabledState, PolicyEnabledStateArgs
- Disabled
- Disabled
- Enabled
- Enabled
- Policy
Enabled State Disabled - Disabled
- Policy
Enabled State Enabled - Enabled
- Disabled
- Disabled
- Enabled
- Enabled
- Disabled
- Disabled
- Enabled
- Enabled
- DISABLED
- Disabled
- ENABLED
- Enabled
- "Disabled"
- Disabled
- "Enabled"
- Enabled
PolicyMode, PolicyModeArgs
- Prevention
- Prevention
- Detection
- Detection
- Policy
Mode Prevention - Prevention
- Policy
Mode Detection - Detection
- Prevention
- Prevention
- Detection
- Detection
- Prevention
- Prevention
- Detection
- Detection
- PREVENTION
- Prevention
- DETECTION
- Detection
- "Prevention"
- Prevention
- "Detection"
- Detection
PolicyRequestBodyCheck, PolicyRequestBodyCheckArgs
- Disabled
- Disabled
- Enabled
- Enabled
- Policy
Request Body Check Disabled - Disabled
- Policy
Request Body Check Enabled - Enabled
- Disabled
- Disabled
- Enabled
- Enabled
- Disabled
- Disabled
- Enabled
- Enabled
- DISABLED
- Disabled
- ENABLED
- Enabled
- "Disabled"
- Disabled
- "Enabled"
- Enabled
RoutingRuleLinkResponse, RoutingRuleLinkResponseArgs
- Id string
- Resource ID.
- Id string
- Resource ID.
- id String
- Resource ID.
- id string
- Resource ID.
- id str
- Resource ID.
- id String
- Resource ID.
RuleType, RuleTypeArgs
- Match
Rule - MatchRule
- Rate
Limit Rule - RateLimitRule
- Rule
Type Match Rule - MatchRule
- Rule
Type Rate Limit Rule - RateLimitRule
- Match
Rule - MatchRule
- Rate
Limit Rule - RateLimitRule
- Match
Rule - MatchRule
- Rate
Limit Rule - RateLimitRule
- MATCH_RULE
- MatchRule
- RATE_LIMIT_RULE
- RateLimitRule
- "Match
Rule" - MatchRule
- "Rate
Limit Rule" - RateLimitRule
SecurityPolicyLinkResponse, SecurityPolicyLinkResponseArgs
- Id string
- Resource ID.
- Id string
- Resource ID.
- id String
- Resource ID.
- id string
- Resource ID.
- id str
- Resource ID.
- id String
- Resource ID.
Sku, SkuArgs
- Name
string | Pulumi.
Azure Native. Network. Sku Name - Name of the pricing tier.
- name
String | "Classic_Azure
Front Door" | "Standard_Azure Front Door" | "Premium_Azure Front Door" - Name of the pricing tier.
SkuName, SkuNameArgs
- Classic_Azure
Front Door - Classic_AzureFrontDoor
- Standard_Azure
Front Door - Standard_AzureFrontDoor
- Premium_Azure
Front Door - Premium_AzureFrontDoor
- Sku
Name_Classic_Azure Front Door - Classic_AzureFrontDoor
- Sku
Name_Standard_Azure Front Door - Standard_AzureFrontDoor
- Sku
Name_Premium_Azure Front Door - Premium_AzureFrontDoor
- Classic_Azure
Front Door - Classic_AzureFrontDoor
- Standard_Azure
Front Door - Standard_AzureFrontDoor
- Premium_Azure
Front Door - Premium_AzureFrontDoor
- Classic_Azure
Front Door - Classic_AzureFrontDoor
- Standard_Azure
Front Door - Standard_AzureFrontDoor
- Premium_Azure
Front Door - Premium_AzureFrontDoor
- CLASSIC_AZURE_FRONT_DOOR
- Classic_AzureFrontDoor
- STANDARD_AZURE_FRONT_DOOR
- Standard_AzureFrontDoor
- PREMIUM_AZURE_FRONT_DOOR
- Premium_AzureFrontDoor
- "Classic_Azure
Front Door" - Classic_AzureFrontDoor
- "Standard_Azure
Front Door" - Standard_AzureFrontDoor
- "Premium_Azure
Front Door" - Premium_AzureFrontDoor
SkuResponse, SkuResponseArgs
- Name string
- Name of the pricing tier.
- Name string
- Name of the pricing tier.
- name String
- Name of the pricing tier.
- name string
- Name of the pricing tier.
- name str
- Name of the pricing tier.
- name String
- Name of the pricing tier.
TransformType, TransformTypeArgs
- Lowercase
- Lowercase
- Uppercase
- Uppercase
- Trim
- Trim
- Url
Decode - UrlDecode
- Url
Encode - UrlEncode
- Remove
Nulls - RemoveNulls
- Transform
Type Lowercase - Lowercase
- Transform
Type Uppercase - Uppercase
- Transform
Type Trim - Trim
- Transform
Type Url Decode - UrlDecode
- Transform
Type Url Encode - UrlEncode
- Transform
Type Remove Nulls - RemoveNulls
- Lowercase
- Lowercase
- Uppercase
- Uppercase
- Trim
- Trim
- Url
Decode - UrlDecode
- Url
Encode - UrlEncode
- Remove
Nulls - RemoveNulls
- Lowercase
- Lowercase
- Uppercase
- Uppercase
- Trim
- Trim
- Url
Decode - UrlDecode
- Url
Encode - UrlEncode
- Remove
Nulls - RemoveNulls
- LOWERCASE
- Lowercase
- UPPERCASE
- Uppercase
- TRIM
- Trim
- URL_DECODE
- UrlDecode
- URL_ENCODE
- UrlEncode
- REMOVE_NULLS
- RemoveNulls
- "Lowercase"
- Lowercase
- "Uppercase"
- Uppercase
- "Trim"
- Trim
- "Url
Decode" - UrlDecode
- "Url
Encode" - UrlEncode
- "Remove
Nulls" - RemoveNulls
Import
An existing resource can be imported using its type token, name, and identifier, e.g.
$ pulumi import azure-native:network:Policy Policy1 /subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/FrontDoorWebApplicationFirewallPolicies/Policy1
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- azure-native-v1 pulumi/pulumi-azure-native
- License
- Apache-2.0
These are the docs for Azure Native v1. We recommenend using the latest version, Azure Native v2.
Azure Native v1 v1.104.0 published on Thursday, Jul 6, 2023 by Pulumi