last sync: 2025-Apr-29 17:44:12 Etc/UTC

Application Gateway - Microsoft Azure Resource type
microsoft.network/applicationgateways

Azure Resource Provider Resource provider (RP) - Microsoft Network [Microsoft.Network]
RP Microsoft.Network
RP display name Microsoft Network
Azure Resource Type
RP Resource types
Resource types: 428
Azure Policy Alias
RP aliases
RP aliases: 19503
Azure Policy definition
RP Azure Policy
Azure Policy definitions: 427
if: 379
then.deployment: 180
then.details: 2
then.existenceCondition: 57
then.operations: 0
Azure RBAC Role Based Access Control
RP RBAC operations
RP RBAC operations: 1014
RP RBAC operationType action: 265
RP RBAC operationType delete: 183
RP RBAC operationType read: 361
RP RBAC operationType write: 205
Azure RBAC Role definition
RP RBAC Roles & Operation actions
Unique RBAC Roles: 72
RBAC Roles with action operationType: 40
RBAC Roles with delete operationType: 23
RBAC Roles with read operationType: 65
RBAC Roles with write operationType: 40
Azure Application
RP related 1st party Service Principals
RP related 1st party Service Principals: 15
• NFV Resource Provider (appId: 328fd23b-de6e-462c-9433-e207470a5727) [ JSON;CSV]
• NetworkVerifier (Microsoft Azure Vnet Verifier) (appId: 6e02f8e9-db9b-4eb5-aa5a-7c8968375f68) [ JSON;CSV]
• NetworkTrafficAnalyticsService (appId: 1e3e4475-288f-4018-a376-df66fd7fac5f) [ JSON;CSV]
• Networking-MNC (AzureVirtualNetworkManager) (appId: 6d057c82-a784-47ae-8d12-ca7b38cf06b4) [ JSON;CSV]
• networkcopilotRP (appId: d66e9e8e-53a4-420c-866d-5bb39aaea675) [ JSON;CSV]
• Network Watcher (appId: 7c33bfcb-8d33-48d6-8e60-dc6404003489) [ JSON;CSV]
• Microsoft Azure Network Copilot (appId: 40c49ff3-c6ae-436d-b28e-b8e268841980) [ JSON;CSV]
• IpAddressManager (Microsoft Azure IPAM) (appId: 60b2e7d5-a27f-426d-a6b1-acced0846fdf) [ JSON;CSV]
• GatewayRP (appId: 486c78bf-a0f7-45f1-92fd-37215929e116) [ JSON;CSV]
• AzureDnsFrontendApp (appId: a0be0c72-870e-46f0-9c49-c98333a996f7) [ JSON;CSV]
• Azure Traffic Manager and DNS (appId: 2cf9eb86-36b5-49dc-86ae-9a63135dfa8c) [ JSON;CSV]
• Azure Support - Network Watcher (appId: 341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd) [ JSON;CSV]
• Azure DNS Managed Resolver (appId: b4ca0290-4e73-4e31-ade0-c82ecfaabf6a) [ JSON;CSV]
• Azure DNS (appId: 19947cfd-0303-466c-ac3c-fcc19a7a1570) [ JSON;CSV]
• Azure Bastion (appId: 79d7fb34-4bef-4417-8184-ff713af7a679) [ JSON;CSV]
All Azure RPs Microsoft Learn
AzResourceTypesAdvertizer (Microsoft only)
Azure Resource Type Resource type (RT) - Application Gateway [microsoft.network/applicationgateways]
RT information
RT microsoft.network/applicationgateways
RT display name Application Gateway
RT type only
(without RP)
applicationGateways
RT sub- Resource types sub-Resource types: 7
RT schema RT schema API versions: 55
All Microsoft Azure RTs AzResourceTypesAdvertizer
Aliases and Azure Policy
Azure Policy Alias
Aliases
aliases: 1892
Azure Policy definition
Azure Policy
Azure Policy definitions: 27
if: 27
then.deployment: 8
then.details: 0
then.existenceCondition: 8
then.operations: 0
RBAC Operations and Roles & Roles related operation actions
Azure RBAC Role Based Access Control
RBAC operations
RBAC operations: 19
RBAC operationType action: 16
RBAC operationType delete: 1
RBAC operationType read: 1
RBAC operationType write: 1
Azure RBAC Role definition
RBAC Roles & Operation actions
Unique RBAC Roles: 20
RBAC Roles with action operationType: 5
RBAC Roles with delete operationType: 5
RBAC Roles with read operationType: 20
RBAC Roles with write operationType: 5
Capabilities & Locations
Azure Resource Diagnostic settings logs
Diagnostic logs
True
log-categories
Azure Resource Diagnostic settings metrics
Diagnostic metrics
True
metrics
Azure Customer-managed key
Customer-managed key (CMK) [experimental]
Unknown
Enforce Encryption with a customer-managed key (CMK) at scale
Azure Managed identity
System-Assigned-Resource-Identity
False
Azure Resource Mover
Cross-ResourceGroup-Resource-Move
False
Azure Resource Mover
Cross-Subscription-Resource-Move
False
Azure Resource Tags
Tags
True
Azure Extension
Extension
False
Azure Private Endpoint
Private-Endpoint
True
Azure Private Endpoint location Azure Private Endpoint location
Supported Locations for Private-Endpoint
Supported Locations for Private-Endpoint: 44
australiacentral, australiaeast, australiasoutheast, brazilsouth, canadacentral, canadaeast, centralindia, centralus, eastasia, eastus, eastus2, francecentral, germanywestcentral, indonesiacentral, israelcentral, italynorth, japaneast, japanwest, jioindiawest, koreacentral, koreasouth, mexicocentral, newzealandnorth, northcentralus, northeurope, norwayeast, polandcentral, qatarcentral, southafricanorth, southcentralus, southeastasia, southindia, spaincentral, swedencentral, switzerlandnorth, uaenorth, uksouth, ukwest, westcentralus, westeurope, westindia, westus, westus2, westus3
Non supported Locations for Private-Endpoint Non supported Locations for Private-Endpoint: 14
brazilus, eastusstg, centraluseuap, eastus2euap, southcentralusstg, southafricawest, australiacentral2, jioindiacentral, francesouth, germanynorth, norwaywest, switzerlandwest, uaecentral, brazilsoutheast
Azure location
Location
True
Azure Resource type location Azure Resource type location
Locations
Locations: 43
australiacentral, australiaeast, australiasoutheast, brazilsouth, canadacentral, canadaeast, centralindia, centralus, eastasia, eastus, eastus2, francecentral, germanywestcentral, indonesiacentral, israelcentral, italynorth, japaneast, japanwest, koreacentral, koreasouth, mexicocentral, newzealandnorth, northcentralus, northeurope, norwayeast, polandcentral, qatarcentral, southafricanorth, southcentralus, southeastasia, southindia, spaincentral, swedencentral, switzerlandnorth, uaenorth, uksouth, ukwest, westcentralus, westeurope, westindia, westus, westus2, westus3
Not locations Not locations: 54
asia, asiapacific, australia, australiacentral2, brazil, brazilsoutheast, brazilus, canada, centraluseuap, centralusstage, eastasiastage, eastus2euap, eastus2stage, eastusstage, eastusstg, europe, france, francesouth, germany, germanynorth, global, india, indonesia, israel, italy, japan, jioindiacentral, jioindiawest, korea, mexico, newzealand, northcentralusstage, norway, norwaywest, poland, qatar, singapore, southafrica, southafricawest, southcentralusstage, southcentralusstg, southeastasiastage, spain, sweden, switzerland, switzerlandwest, taiwan, uae, uaecentral, uk, unitedstates, unitedstateseuap, westus2stage, westusstage
Assessment tooling
Azure Advisor
Azure Advisor
Azure Advisor recommendations: 22
HighAvailability [High] Application Gateway requires use of TLS 1.2 or later
HighAvailability [High] Change subnet of V1 gateway as the current subnet contains a NAT gateway
HighAvailability [High] Change subnet of V1 gateway named GatewaySubnet as it is reserved for VPN/Express Route
HighAvailability [High] Deploy your Application Gateway across Availability Zones
HighAvailability [High] Reactivate the Subscription to unblock internal upgrade for V1 gateway
HighAvailability [High] Update VNet permission of Application Gateway users
HighAvailability [High] Use a health probe for monitoring the health of servers
HighAvailability [High] Use version-less Key Vault secret identifier to reference the certificates
HighAvailability [Medium] Application Gateway V1 is being retired.
HighAvailability [Medium] Application Gateway Web Application Firewall v2 configuration is planned for retirement
HighAvailability [Medium] Avoid hostname override to ensure site integrity
HighAvailability [Medium] Ensure autoscaling is used for increased performance and resiliency
HighAvailability [Medium] Upgrade your SKU or add more instances
OperationalExcellence [High] Application Gateway does not have enough capacity to scale
OperationalExcellence [High] Application Gateway v1 has been retired. Please migrate to Application Gateway v2.
OperationalExcellence [High] Fix DNS configuration causing resolution failures
OperationalExcellence [High] Remove the conflicting private frontend IP configuration
OperationalExcellence [High] Resolve Azure Key Vault issue for your Application Gateway
OperationalExcellence [High] Resolve Certificate Update issue for your Application Gateway
OperationalExcellence [High] Upgrade your legacy WAF configuration to WAF policies
Performance [Medium] Make sure you have enough instances in your Application Gateway to support your traffic
Security [Low] Web Application Firewall (WAF) should be enabled for Application Gateway
Azure Proactive Resilience Library v2 (APRLv2)
Azure Proactive Resilience Library v2 (APRLv2)
Azure Proactive Resilience Library v2 recommendations: 7
HighAvailability [High] Deploy Application Gateway in a zone-redundant configuration
HighAvailability [Medium] Plan for backend maintenance by using connection draining
MonitoringAndAlerting [High] Monitor and Log the configurations and traffic
MonitoringAndAlerting [High] Use Health Probes to detect backend availability
OtherBestPractices [High] Ensure Application Gateway Subnet is using a /24 subnet mask
Scalability [High] Migrate to Application Gateway v2
Scalability [Medium] Ensure Autoscale feature has been enabled
PSRule for Azure
PSRule for Azure
PSRule for Azure rules: 13
Operational Excellence [Awareness] Use valid names
Operational Excellence [Important] Migrate to Application Gateway v2
Operational Excellence [Important] Use production Application Gateway SKU
Reliability [Critical] Migrate to Application Gateway WAF policy
Reliability [Important] Application gateways should use Availability zones in supported regions
Reliability [Important] Use two or more Application Gateway instances
Security [Critical] Application Gateway uses WAF SKU
Security [Critical] Application Gateway WAF is enabled
Security [Critical] Application Gateways use a minimum TLS 1.2
Security [Critical] Expose frontend HTTP endpoints over HTTPS
Security [Critical] Use WAF prevention mode
Security [Important] Application Gateway rules are enabled
Security [Important] Use OWASP 3.x rules
Azure Quick Review (AZQR)
Azure Quick Review (AZQR)
Azure Quick Review (AZQR) recommendations: 13
Governance [Low] Application Gateway Name should comply with naming conventions
Governance [Low] Application Gateway should have tags
Governance [Medium] Application Gateways without backend targets
HighAvailability [High] Application Gateway SLA
HighAvailability [High] Deploy Application Gateway in a zone-redundant configuration
HighAvailability [Medium] Plan for backend maintenance by using connection draining
MonitoringAndAlerting [High] Use Health Probes to detect backend availability
MonitoringAndAlerting [Low] Application Gateway: Monitor and Log the configurations and traffic
OtherBestPractices [High] Ensure Application Gateway Subnet is using a /24 subnet mask
Scalability [High] Migrate to Application Gateway v2
Scalability [Medium] Ensure Autoscale feature has been enabled
Security [High] Secure all incoming connections with SSL
Security [Low] Enable Web Application Firewall policies
Infrastructure as Code (IaC)
ARM (Azure Resource Manager)
ARM (Azure Resource Manager) templates
ARM (Azure Resource Manager) template API versions: 55
latest
Azure Bicep
Bicep templates
Bicep template API versions: 55
latest
Terraform
Terraform provider
Terraform providers: 1
application_gateway
AzAPI Terraform
AzAPI Terraform templates
AzAPI Terraform template API versions: 55
latest
Pulumi
Pulumi provider
Pulumi providers: 1
network/applicationgateway
OpenTofu
OpenTofu provider
OpenTofu TF providers: 1
application_gateway
Azure Verified Modules (AVM) Bicep Azure Verified Modules (AVM) Bicep
Azure Verified Modules (AVM) Bicep
Application Gateway
Azure Verified Modules (AVM) Terraform Azure Verified Modules (AVM) Terraform
Azure Verified Modules (AVM) Terraform
• GitHub: Application Gateway
• Terraform registry: Application Gateway
REST-API (Representational State Transfer - Application Programming Interface)
REST-API versions REST-API versions: 68
2024-07-01
2024-05-01
2024-03-01
2024-01-01
2023-11-01
2023-09-01
2023-06-01
2023-05-01
2023-04-01
2023-02-01
2022-11-01
2022-09-01
2022-07-01
2022-05-01
2022-01-01
2021-12-01
2021-08-01
2021-06-01
2021-05-01
2021-04-01
2021-03-01
2021-02-01
2021-01-01
2020-11-01
2020-08-01
2020-07-01
2020-06-01
2020-05-01
2020-04-01
2020-03-01
2020-01-01
2019-12-01
2019-11-01
2019-09-01
2019-08-01
2019-07-01
2019-06-01
2019-04-01
2019-02-01
2018-12-01
2018-11-01
2018-10-01
2018-08-01
2018-07-01
2018-06-01
2018-05-01
2018-04-01
2018-03-01
2018-02-01
2018-01-01
2017-11-01
2017-10-01
2017-09-01
2017-08-01
2017-06-01
2017-04-01
2017-03-01
2016-12-01
2016-11-01
2016-10-01
2016-09-01
2016-08-01
2016-07-01
2016-06-01
2016-03-30
2015-06-15
2015-05-01-preview
2014-12-01-preview
REST-API version default 2020-03-01
API profiles n/a
Resource naming
Azure Naming Tool
Azure Naming Tool
The Azure Naming Tool was created to help administrators define and manage their naming conventions, while providing a simple interface for users to generate a compliant name.
Resource naming details
{
  "property": "",
  "ShortName": "agw",
  "scope": "resource group",
  "lengthMin": "1",
  "lengthMax": "24",
  "validText": "Alphanumerics, underscores, periods, and hyphens. Start with alphanumeric. End with alphanumeric or underscore.",
  "invalidText": "",
  "invalidCharacters": "",
  "invalidCharactersStart": "",
  "invalidCharactersEnd": "",
  "invalidCharactersConsecutive": "",
  "regx": "^(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9_\\.-]{0,22}[a-zA-Z0-9_])$",
  "staticValues": ""
}