AzPolicyAdvertizer

last sync: 2021-Sep-24 16:09:49 UTC

Azure Policy definition

Web Application Firewall (WAF) should use the specified mode for Azure Front Door Service

Name Web Application Firewall (WAF) should use the specified mode for Azure Front Door Service
Azure Portal
Id 425bea59-a659-4cbb-8d31-34499bd030b8
Version 1.0.0
details on versioning
Category Network
Microsoft docs
Description Mandates the use of 'Detection' or 'Prevention' mode to be active on all Web Application Firewall policies for Azure Front Door Service.
Mode Indexed
Type BuiltIn
Preview FALSE
Deprecated FALSE
Effect Default: Audit
Allowed: (Audit, Deny, Disabled)
Used RBAC Role none
History
Date/Time (UTC ymd) (i) Change type Change detail
2020-07-08 14:28:08 add 425bea59-a659-4cbb-8d31-34499bd030b8
Used in Initiatives
Initiative DisplayName Initiative Id Initiative Category State
[Preview]: CMMC Level 3 b5629c75-5c77-4422-87b9-2509e680f8de Regulatory Compliance Preview
New Zealand ISM Restricted d1a462af-7e6d-4901-98ac-61570b4ed22a Regulatory Compliance GA
JSON 
{
  "displayName": "Web Application Firewall (WAF) should use the specified mode for Azure Front Door Service",
  "policyType": "BuiltIn",
  "mode": "Indexed",
  "description": "Mandates the use of 'Detection' or 'Prevention' mode to be active on all Web Application Firewall policies for Azure Front Door Service.",
  "metadata": {
    "version": "1.0.0",
    "category": "Network"
  },
  "parameters": {
    "effect": {
      "type": "String",
      "metadata": {
        "displayName": "Effect",
        "description": "Enable or disable the execution of the policy"
      },
      "allowedValues": [
        "Audit",
        "Deny",
        "Disabled"
      ],
      "defaultValue": "Audit"
    },
    "modeRequirement": {
      "type": "String",
      "metadata": {
        "displayName": "Mode Requirement",
        "description": "Mode required for all WAF policies"
      },
      "allowedValues": [
        "Prevention",
        "Detection"
      ],
      "defaultValue": "Detection"
    }
  },
  "policyRule": {
    "if": {
      "allOf": [
        {
          "field": "type",
          "equals": "Microsoft.Network/frontdoorwebapplicationfirewallpolicies"
        },
        {
          "field": "Microsoft.Network/frontdoorWebApplicationFirewallPolicies/policySettings.mode",
          "notEquals": "[parameters('modeRequirement')]"
        }
      ]
    },
    "then": {
      "effect": "[parameters('effect')]"
    }
  }
}