last sync: 2025-Apr-29 17:44:12 Etc/UTC

Web Application Firewall Policy - Microsoft Azure Resource type
microsoft.network/frontdoorwebapplicationfirewallpolicies

Azure Resource Provider Resource provider (RP) - Microsoft Network [Microsoft.Network]
RP Microsoft.Network
RP display name Microsoft Network
Azure Resource Type
RP Resource types
Resource types: 428
Azure Policy Alias
RP aliases
RP aliases: 19503
Azure Policy definition
RP Azure Policy
Azure Policy definitions: 427
if: 379
then.deployment: 180
then.details: 2
then.existenceCondition: 57
then.operations: 0
Azure RBAC Role Based Access Control
RP RBAC operations
RP RBAC operations: 1014
RP RBAC operationType action: 265
RP RBAC operationType delete: 183
RP RBAC operationType read: 361
RP RBAC operationType write: 205
Azure RBAC Role definition
RP RBAC Roles & Operation actions
Unique RBAC Roles: 72
RBAC Roles with action operationType: 40
RBAC Roles with delete operationType: 23
RBAC Roles with read operationType: 65
RBAC Roles with write operationType: 40
Azure Application
RP related 1st party Service Principals
RP related 1st party Service Principals: 15
• NFV Resource Provider (appId: 328fd23b-de6e-462c-9433-e207470a5727) [ JSON;CSV]
• NetworkVerifier (Microsoft Azure Vnet Verifier) (appId: 6e02f8e9-db9b-4eb5-aa5a-7c8968375f68) [ JSON;CSV]
• NetworkTrafficAnalyticsService (appId: 1e3e4475-288f-4018-a376-df66fd7fac5f) [ JSON;CSV]
• Networking-MNC (AzureVirtualNetworkManager) (appId: 6d057c82-a784-47ae-8d12-ca7b38cf06b4) [ JSON;CSV]
• networkcopilotRP (appId: d66e9e8e-53a4-420c-866d-5bb39aaea675) [ JSON;CSV]
• Network Watcher (appId: 7c33bfcb-8d33-48d6-8e60-dc6404003489) [ JSON;CSV]
• Microsoft Azure Network Copilot (appId: 40c49ff3-c6ae-436d-b28e-b8e268841980) [ JSON;CSV]
• IpAddressManager (Microsoft Azure IPAM) (appId: 60b2e7d5-a27f-426d-a6b1-acced0846fdf) [ JSON;CSV]
• GatewayRP (appId: 486c78bf-a0f7-45f1-92fd-37215929e116) [ JSON;CSV]
• AzureDnsFrontendApp (appId: a0be0c72-870e-46f0-9c49-c98333a996f7) [ JSON;CSV]
• Azure Traffic Manager and DNS (appId: 2cf9eb86-36b5-49dc-86ae-9a63135dfa8c) [ JSON;CSV]
• Azure Support - Network Watcher (appId: 341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd) [ JSON;CSV]
• Azure DNS Managed Resolver (appId: b4ca0290-4e73-4e31-ade0-c82ecfaabf6a) [ JSON;CSV]
• Azure DNS (appId: 19947cfd-0303-466c-ac3c-fcc19a7a1570) [ JSON;CSV]
• Azure Bastion (appId: 79d7fb34-4bef-4417-8184-ff713af7a679) [ JSON;CSV]
All Azure RPs Microsoft Learn
AzResourceTypesAdvertizer (Microsoft only)
Azure Resource Type Resource type (RT) - Web Application Firewall Policy [microsoft.network/frontdoorwebapplicationfirewallpolicies]
RT information
RT microsoft.network/frontdoorwebapplicationfirewallpolicies
RT display name Web Application Firewall Policy
RT type only
(without RP)
frontdoorWebApplicationFirewallPolicies
RT sub- Resource types sub-Resource types: 0
RT schema RT schema API versions: 8
All Microsoft Azure RTs AzResourceTypesAdvertizer
Aliases and Azure Policy
Azure Policy Alias
Aliases
aliases: 95
Azure Policy definition
Azure Policy
Azure Policy definitions: 5
if: 5
then.deployment: 0
then.details: 0
then.existenceCondition: 0
then.operations: 0
RBAC Operations and Roles & Roles related operation actions
Azure RBAC Role Based Access Control
RBAC operations
RBAC operations: 4
RBAC operationType action: 1
RBAC operationType delete: 1
RBAC operationType read: 1
RBAC operationType write: 1
Azure RBAC Role definition
RBAC Roles & Operation actions
Unique RBAC Roles: 19
RBAC Roles with action operationType: 5
RBAC Roles with delete operationType: 5
RBAC Roles with read operationType: 19
RBAC Roles with write operationType: 5
Capabilities & Locations
Azure Resource Diagnostic settings logs
Diagnostic logs
False
Azure Resource Diagnostic settings metrics
Diagnostic metrics
False
Azure Customer-managed key
Customer-managed key (CMK) [experimental]
Unknown
Enforce Encryption with a customer-managed key (CMK) at scale
Azure Managed identity
System-Assigned-Resource-Identity
False
Azure Resource Mover
Cross-ResourceGroup-Resource-Move
False
Azure Resource Mover
Cross-Subscription-Resource-Move
False
Azure Resource Tags
Tags
True
Azure Extension
Extension
False
Azure Private Endpoint
Private-Endpoint
False
Azure Private Endpoint location Azure Private Endpoint location
Supported Locations for Private-Endpoint
n/a
Non supported Locations for Private-Endpoint n/a
Azure location
Location
True
Azure Resource type location Azure Resource type location
Locations
Locations: 16
australiaeast, australiasoutheast, brazilsouth, centralus, eastasia, eastus, eastus2, global, japaneast, japanwest, northcentralus, northeurope, southcentralus, southeastasia, westeurope, westus
Not locations Not locations: 81
asia, asiapacific, australia, australiacentral, australiacentral2, brazil, brazilsoutheast, brazilus, canada, canadacentral, canadaeast, centralindia, centraluseuap, centralusstage, eastasiastage, eastus2euap, eastus2stage, eastusstage, eastusstg, europe, france, francecentral, francesouth, germany, germanynorth, germanywestcentral, india, indonesia, indonesiacentral, israel, israelcentral, italy, italynorth, japan, jioindiacentral, jioindiawest, korea, koreacentral, koreasouth, mexico, mexicocentral, newzealand, newzealandnorth, northcentralusstage, norway, norwayeast, norwaywest, poland, polandcentral, qatar, qatarcentral, singapore, southafrica, southafricanorth, southafricawest, southcentralusstage, southcentralusstg, southeastasiastage, southindia, spain, spaincentral, sweden, swedencentral, switzerland, switzerlandnorth, switzerlandwest, taiwan, uae, uaecentral, uaenorth, uk, uksouth, ukwest, unitedstates, unitedstateseuap, westcentralus, westindia, westus2, westus2stage, westus3, westusstage
Assessment tooling
Azure Advisor
Azure Advisor
Azure Advisor recommendations: 2
OperationalExcellence [High] Upgrade to the latest DRS rule set in Front Door WAF
OperationalExcellence [Medium] Upgrade to the latest bot protection rule set in Front Door WAF
Azure Proactive Resilience Library v2 (APRLv2)
Azure Proactive Resilience Library v2 (APRLv2)
n/a
PSRule for Azure
PSRule for Azure
PSRule for Azure rules: 7
Operational Excellence [Awareness] Use valid Front Door WAF policy names
Security [Critical] Avoid configuring Front Door WAF rule exclusions
Security [Critical] Enable Front Door WAF policy
Security [Critical] Enable Front Door WAF policy
Security [Critical] Use Front Door WAF policy in prevention mode
Security [Critical] Use Front Door WAF policy in prevention mode
Security [Critical] Use Recommended Front Door WAF policy rule groups
Azure Quick Review (AZQR)
Azure Quick Review (AZQR)
Azure Quick Review (AZQR) recommendations: 1
Governance [Medium] Front Door WAF Policy without associations
Infrastructure as Code (IaC)
ARM (Azure Resource Manager)
ARM (Azure Resource Manager) templates
ARM (Azure Resource Manager) template API versions: 8
latest
Azure Bicep
Bicep templates
Bicep template API versions: 8
latest
Terraform
Terraform provider
Terraform providers: 2
cdn_frontdoor_firewall_policy
frontdoor_firewall_policy
AzAPI Terraform
AzAPI Terraform templates
AzAPI Terraform template API versions: 8
latest
Pulumi
Pulumi provider
Pulumi providers: 1
frontdoor/policy
OpenTofu
OpenTofu provider
OpenTofu TF providers: 2
cdn_frontdoor_firewall_policy
frontdoor_firewall_policy
Azure Verified Modules (AVM) Bicep Azure Verified Modules (AVM) Bicep
Azure Verified Modules (AVM) Bicep
Front Door Web Application Firewall (WAF) Policy
Azure Verified Modules (AVM) Terraform Azure Verified Modules (AVM) Terraform
Azure Verified Modules (AVM) Terraform
• GitHub: Front Door Web Application Firewall (WAF) Policy
• Terraform registry: Front Door Web Application Firewall (WAF) Policy
REST-API (Representational State Transfer - Application Programming Interface)
REST-API versions REST-API versions: 9
2025-03-01
2025-01-01-preview
2024-02-01
2022-05-01
2020-11-01
2020-04-01
2019-10-01
2019-03-01
2018-08-01
REST-API version default 2020-11-01
API profiles n/a
Resource naming
Azure Naming Tool
Azure Naming Tool
The Azure Naming Tool was created to help administrators define and manage their naming conventions, while providing a simple interface for users to generate a compliant name.
Resource naming details
{
  "property": "",
  "ShortName": "fdfp",
  "scope": "resource group",
  "lengthMin": "1",
  "lengthMax": "128",
  "validText": "Alphanumerics. Start with letter.",
  "invalidText": "",
  "invalidCharacters": "",
  "invalidCharactersStart": "",
  "invalidCharactersEnd": "",
  "invalidCharactersConsecutive": "",
  "regx": "^(?:[a-zA-Z]|[a-zA-Z][a-zA-Z0-9]{0,127})$",
  "staticValues": ""
}