last sync: 2020-Aug-05 13:05:29 UTC

Azure Policy

Web Application Firewall (WAF) should use the specified mode for Azure Front Door Service

Policy DisplayName Web Application Firewall (WAF) should use the specified mode for Azure Front Door Service
Policy Id 425bea59-a659-4cbb-8d31-34499bd030b8
Policy Category Network
Policy Description Mandates the use of 'Detection' or 'Prevention' mode to be active on all Web Application Firewall policies for Azure Front Door Service.
Policy Mode Indexed
Policy Type BuiltIn
Policy in Preview FALSE
Policy Deprecated FALSE
Policy Effect Default: Audit
Allowed: (Audit,Deny,Disabled)
Roles used none
Policy Changes
Date/Time (UTC ymd) (i) Change Change detail
2020-07-08 14:28:08 add: Policy 425bea59-a659-4cbb-8d31-34499bd030b8
Used in Policy Initiative(s) none
Policy Rule
{
  "properties": {
    "displayName": "Web Application Firewall (WAF) should use the specified mode for Azure Front Door Service",
    "policyType": "BuiltIn",
    "mode": "Indexed",
    "description": "Mandates the use of 'Detection' or 'Prevention' mode to be active on all Web Application Firewall policies for Azure Front Door Service.",
    "metadata": {
      "version": "1.0.0",
      "category": "Network"
    },
    "parameters": {
      "effect": {
        "type": "String",
        "metadata": {
          "displayName": "Effect",
          "description": "Enable or disable the execution of the policy"
        },
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "defaultValue": "Audit"
      },
      "modeRequirement": {
        "type": "String",
        "metadata": {
          "displayName": "Mode Requirement",
          "description": "Mode required for all WAF policies"
        },
        "allowedValues": [
          "Prevention",
          "Detection"
        ],
        "defaultValue": "Detection"
      }
    },
    "policyRule": {
      "if": {
        "allOf": [
          {
            "field": "type",
            "equals": "Microsoft.Network/frontdoorwebapplicationfirewallpolicies"
          },
          {
            "field": "Microsoft.Network/frontdoorWebApplicationFirewallPolicies/policySettings.mode",
          "notEquals": "[parameters('modeRequirement')]"
          }
        ]
      },
      "then": {
      "effect": "[parameters('effect')]"
      }
    }
  },
  "id": "/providers/Microsoft.Authorization/policyDefinitions/425bea59-a659-4cbb-8d31-34499bd030b8",
  "type": "Microsoft.Authorization/policyDefinitions",
  "name": "425bea59-a659-4cbb-8d31-34499bd030b8"
}