last sync: 2020-Aug-05 13:05:29 UTC

Azure Policy

Web Application Firewall (WAF) should be enabled for Azure Front Door Service

Policy DisplayName Web Application Firewall (WAF) should be enabled for Azure Front Door Service
Policy Id 055aa869-bc98-4af8-bafc-23f1ab6ffe2c
Policy Category Network
Policy Description Requires Web Application Firewall (WAF) on any Azure Front Door Service. A Web Application Firewall provides greater security for your other Azure resources.
Policy Mode Indexed
Policy Type BuiltIn
Policy in Preview FALSE
Policy Deprecated FALSE
Policy Effect Default: Audit
Allowed: (Audit,Deny,Disabled)
Roles used none
Policy Changes
Date/Time (UTC ymd) (i) Change Change detail
2020-07-08 14:28:08 add: Policy 055aa869-bc98-4af8-bafc-23f1ab6ffe2c
Used in Policy Initiative(s) none
Policy Rule
{
  "properties": {
    "displayName": "Web Application Firewall (WAF) should be enabled for Azure Front Door Service",
    "policyType": "BuiltIn",
    "mode": "Indexed",
    "description": "Requires Web Application Firewall (WAF) on any Azure Front Door Service. A Web Application Firewall provides greater security for your other Azure resources.",
    "metadata": {
      "version": "1.0.0",
      "category": "Network"
    },
    "parameters": {
      "effect": {
        "type": "String",
        "metadata": {
          "displayName": "Effect",
          "description": "Enable or disable the execution of the policy"
        },
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "defaultValue": "Audit"
      }
    },
    "policyRule": {
      "if": {
        "allOf": [
          {
            "field": "type",
            "equals": "Microsoft.Network/frontdoors"
          },
          {
          "field": "Microsoft.Network/frontdoors/frontendEndpoints[*].webApplicationFirewallPolicyLink.id",
            "exists": "false"
          }
        ]
      },
      "then": {
      "effect": "[parameters('effect')]"
      }
    }
  },
  "id": "/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c",
  "type": "Microsoft.Authorization/policyDefinitions",
  "name": "055aa869-bc98-4af8-bafc-23f1ab6ffe2c"
}