Docs Packages
  1. Pulumi Registry
  2. Azure Native
  3. API Docs
  4. cdn
  5. Policy
azure-native logo
Azure Native v1.103.0, Jun 2 23

azure-native.cdn.Policy

Explore with Pulumi AI

Defines web application firewall policy for Azure CDN. API Version: 2020-09-01.

Example Usage

Creates specific policy

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var policy = new AzureNative.Cdn.Policy("policy", new()
    {
        CustomRules = new AzureNative.Cdn.Inputs.CustomRuleListArgs
        {
            Rules = new[]
            {
                new AzureNative.Cdn.Inputs.CustomRuleArgs
                {
                    Action = "Block",
                    EnabledState = "Enabled",
                    MatchConditions = new[]
                    {
                        new AzureNative.Cdn.Inputs.MatchConditionArgs
                        {
                            MatchValue = new[]
                            {
                                "CH",
                            },
                            MatchVariable = "RemoteAddr",
                            NegateCondition = false,
                            Operator = "GeoMatch",
                            Transforms = new[] {},
                        },
                        new AzureNative.Cdn.Inputs.MatchConditionArgs
                        {
                            MatchValue = new[]
                            {
                                "windows",
                            },
                            MatchVariable = "RequestHeader",
                            NegateCondition = false,
                            Operator = "Contains",
                            Selector = "UserAgent",
                            Transforms = new[] {},
                        },
                        new AzureNative.Cdn.Inputs.MatchConditionArgs
                        {
                            MatchValue = new[]
                            {
                                "<?php",
                                "?>",
                            },
                            MatchVariable = "QueryString",
                            NegateCondition = false,
                            Operator = "Contains",
                            Selector = "search",
                            Transforms = new[]
                            {
                                "UrlDecode",
                                "Lowercase",
                            },
                        },
                    },
                    Name = "CustomRule1",
                    Priority = 2,
                },
            },
        },
        Location = "WestUs",
        ManagedRules = new AzureNative.Cdn.Inputs.ManagedRuleSetListArgs
        {
            ManagedRuleSets = new[]
            {
                new AzureNative.Cdn.Inputs.ManagedRuleSetArgs
                {
                    RuleGroupOverrides = new[]
                    {
                        new AzureNative.Cdn.Inputs.ManagedRuleGroupOverrideArgs
                        {
                            RuleGroupName = "Group1",
                            Rules = new[]
                            {
                                new AzureNative.Cdn.Inputs.ManagedRuleOverrideArgs
                                {
                                    Action = "Redirect",
                                    EnabledState = "Enabled",
                                    RuleId = "GROUP1-0001",
                                },
                                new AzureNative.Cdn.Inputs.ManagedRuleOverrideArgs
                                {
                                    EnabledState = "Disabled",
                                    RuleId = "GROUP1-0002",
                                },
                            },
                        },
                    },
                    RuleSetType = "DefaultRuleSet",
                    RuleSetVersion = "preview-1.0",
                },
            },
        },
        PolicyName = "MicrosoftCdnWafPolicy",
        PolicySettings = new AzureNative.Cdn.Inputs.PolicySettingsArgs
        {
            DefaultCustomBlockResponseBody = "PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==",
            DefaultCustomBlockResponseStatusCode = 200,
            DefaultRedirectUrl = "http://www.bing.com",
        },
        RateLimitRules = new AzureNative.Cdn.Inputs.RateLimitRuleListArgs
        {
            Rules = new[]
            {
                new AzureNative.Cdn.Inputs.RateLimitRuleArgs
                {
                    Action = "Block",
                    EnabledState = "Enabled",
                    MatchConditions = new[]
                    {
                        new AzureNative.Cdn.Inputs.MatchConditionArgs
                        {
                            MatchValue = new[]
                            {
                                "192.168.1.0/24",
                                "10.0.0.0/24",
                            },
                            MatchVariable = "RemoteAddr",
                            NegateCondition = false,
                            Operator = "IPMatch",
                            Transforms = new[] {},
                        },
                    },
                    Name = "RateLimitRule1",
                    Priority = 1,
                    RateLimitDurationInMinutes = 0,
                    RateLimitThreshold = 1000,
                },
            },
        },
        ResourceGroupName = "rg1",
        Sku = new AzureNative.Cdn.Inputs.SkuArgs
        {
            Name = "Standard_Microsoft",
        },
    });

});

Coming soon!

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.cdn.Policy;
import com.pulumi.azurenative.cdn.PolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var policy = new Policy("policy", PolicyArgs.builder()        
            .customRules(Map.of("rules", Map.ofEntries(
                Map.entry("action", "Block"),
                Map.entry("enabledState", "Enabled"),
                Map.entry("matchConditions",                 
                    Map.ofEntries(
                        Map.entry("matchValue", "CH"),
                        Map.entry("matchVariable", "RemoteAddr"),
                        Map.entry("negateCondition", false),
                        Map.entry("operator", "GeoMatch"),
                        Map.entry("transforms", )
                    ),
                    Map.ofEntries(
                        Map.entry("matchValue", "windows"),
                        Map.entry("matchVariable", "RequestHeader"),
                        Map.entry("negateCondition", false),
                        Map.entry("operator", "Contains"),
                        Map.entry("selector", "UserAgent"),
                        Map.entry("transforms", )
                    ),
                    Map.ofEntries(
                        Map.entry("matchValue",                         
                            "<?php",
                            "?>"),
                        Map.entry("matchVariable", "QueryString"),
                        Map.entry("negateCondition", false),
                        Map.entry("operator", "Contains"),
                        Map.entry("selector", "search"),
                        Map.entry("transforms",                         
                            "UrlDecode",
                            "Lowercase")
                    )),
                Map.entry("name", "CustomRule1"),
                Map.entry("priority", 2)
            )))
            .location("WestUs")
            .managedRules(Map.of("managedRuleSets", Map.ofEntries(
                Map.entry("ruleGroupOverrides", Map.ofEntries(
                    Map.entry("ruleGroupName", "Group1"),
                    Map.entry("rules",                     
                        Map.ofEntries(
                            Map.entry("action", "Redirect"),
                            Map.entry("enabledState", "Enabled"),
                            Map.entry("ruleId", "GROUP1-0001")
                        ),
                        Map.ofEntries(
                            Map.entry("enabledState", "Disabled"),
                            Map.entry("ruleId", "GROUP1-0002")
                        ))
                )),
                Map.entry("ruleSetType", "DefaultRuleSet"),
                Map.entry("ruleSetVersion", "preview-1.0")
            )))
            .policyName("MicrosoftCdnWafPolicy")
            .policySettings(Map.ofEntries(
                Map.entry("defaultCustomBlockResponseBody", "PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg=="),
                Map.entry("defaultCustomBlockResponseStatusCode", 200),
                Map.entry("defaultRedirectUrl", "http://www.bing.com")
            ))
            .rateLimitRules(Map.of("rules", Map.ofEntries(
                Map.entry("action", "Block"),
                Map.entry("enabledState", "Enabled"),
                Map.entry("matchConditions", Map.ofEntries(
                    Map.entry("matchValue",                     
                        "192.168.1.0/24",
                        "10.0.0.0/24"),
                    Map.entry("matchVariable", "RemoteAddr"),
                    Map.entry("negateCondition", false),
                    Map.entry("operator", "IPMatch"),
                    Map.entry("transforms", )
                )),
                Map.entry("name", "RateLimitRule1"),
                Map.entry("priority", 1),
                Map.entry("rateLimitDurationInMinutes", 0),
                Map.entry("rateLimitThreshold", 1000)
            )))
            .resourceGroupName("rg1")
            .sku(Map.of("name", "Standard_Microsoft"))
            .build());

    }
}

import pulumi
import pulumi_azure_native as azure_native

policy = azure_native.cdn.Policy("policy",
    custom_rules=azure_native.cdn.CustomRuleListResponseArgs(
        rules=[{
            "action": "Block",
            "enabledState": "Enabled",
            "matchConditions": [
                azure_native.cdn.MatchConditionArgs(
                    match_value=["CH"],
                    match_variable="RemoteAddr",
                    negate_condition=False,
                    operator="GeoMatch",
                    transforms=[],
                ),
                azure_native.cdn.MatchConditionArgs(
                    match_value=["windows"],
                    match_variable="RequestHeader",
                    negate_condition=False,
                    operator="Contains",
                    selector="UserAgent",
                    transforms=[],
                ),
                azure_native.cdn.MatchConditionArgs(
                    match_value=[
                        "<?php",
                        "?>",
                    ],
                    match_variable="QueryString",
                    negate_condition=False,
                    operator="Contains",
                    selector="search",
                    transforms=[
                        "UrlDecode",
                        "Lowercase",
                    ],
                ),
            ],
            "name": "CustomRule1",
            "priority": 2,
        }],
    ),
    location="WestUs",
    managed_rules=azure_native.cdn.ManagedRuleSetListResponseArgs(
        managed_rule_sets=[{
            "ruleGroupOverrides": [{
                "ruleGroupName": "Group1",
                "rules": [
                    azure_native.cdn.ManagedRuleOverrideArgs(
                        action="Redirect",
                        enabled_state="Enabled",
                        rule_id="GROUP1-0001",
                    ),
                    azure_native.cdn.ManagedRuleOverrideArgs(
                        enabled_state="Disabled",
                        rule_id="GROUP1-0002",
                    ),
                ],
            }],
            "ruleSetType": "DefaultRuleSet",
            "ruleSetVersion": "preview-1.0",
        }],
    ),
    policy_name="MicrosoftCdnWafPolicy",
    policy_settings=azure_native.cdn.PolicySettingsArgs(
        default_custom_block_response_body="PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==",
        default_custom_block_response_status_code=200,
        default_redirect_url="http://www.bing.com",
    ),
    rate_limit_rules=azure_native.cdn.RateLimitRuleListResponseArgs(
        rules=[{
            "action": "Block",
            "enabledState": "Enabled",
            "matchConditions": [azure_native.cdn.MatchConditionArgs(
                match_value=[
                    "192.168.1.0/24",
                    "10.0.0.0/24",
                ],
                match_variable="RemoteAddr",
                negate_condition=False,
                operator="IPMatch",
                transforms=[],
            )],
            "name": "RateLimitRule1",
            "priority": 1,
            "rateLimitDurationInMinutes": 0,
            "rateLimitThreshold": 1000,
        }],
    ),
    resource_group_name="rg1",
    sku=azure_native.cdn.SkuArgs(
        name="Standard_Microsoft",
    ))

import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const policy = new azure_native.cdn.Policy("policy", {
    customRules: {
        rules: [{
            action: "Block",
            enabledState: "Enabled",
            matchConditions: [
                {
                    matchValue: ["CH"],
                    matchVariable: "RemoteAddr",
                    negateCondition: false,
                    operator: "GeoMatch",
                    transforms: [],
                },
                {
                    matchValue: ["windows"],
                    matchVariable: "RequestHeader",
                    negateCondition: false,
                    operator: "Contains",
                    selector: "UserAgent",
                    transforms: [],
                },
                {
                    matchValue: [
                        "<?php",
                        "?>",
                    ],
                    matchVariable: "QueryString",
                    negateCondition: false,
                    operator: "Contains",
                    selector: "search",
                    transforms: [
                        "UrlDecode",
                        "Lowercase",
                    ],
                },
            ],
            name: "CustomRule1",
            priority: 2,
        }],
    },
    location: "WestUs",
    managedRules: {
        managedRuleSets: [{
            ruleGroupOverrides: [{
                ruleGroupName: "Group1",
                rules: [
                    {
                        action: "Redirect",
                        enabledState: "Enabled",
                        ruleId: "GROUP1-0001",
                    },
                    {
                        enabledState: "Disabled",
                        ruleId: "GROUP1-0002",
                    },
                ],
            }],
            ruleSetType: "DefaultRuleSet",
            ruleSetVersion: "preview-1.0",
        }],
    },
    policyName: "MicrosoftCdnWafPolicy",
    policySettings: {
        defaultCustomBlockResponseBody: "PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==",
        defaultCustomBlockResponseStatusCode: 200,
        defaultRedirectUrl: "http://www.bing.com",
    },
    rateLimitRules: {
        rules: [{
            action: "Block",
            enabledState: "Enabled",
            matchConditions: [{
                matchValue: [
                    "192.168.1.0/24",
                    "10.0.0.0/24",
                ],
                matchVariable: "RemoteAddr",
                negateCondition: false,
                operator: "IPMatch",
                transforms: [],
            }],
            name: "RateLimitRule1",
            priority: 1,
            rateLimitDurationInMinutes: 0,
            rateLimitThreshold: 1000,
        }],
    },
    resourceGroupName: "rg1",
    sku: {
        name: "Standard_Microsoft",
    },
});

resources:
  policy:
    type: azure-native:cdn:Policy
    properties:
      customRules:
        rules:
          - action: Block
            enabledState: Enabled
            matchConditions:
              - matchValue:
                  - CH
                matchVariable: RemoteAddr
                negateCondition: false
                operator: GeoMatch
                transforms: []
              - matchValue:
                  - windows
                matchVariable: RequestHeader
                negateCondition: false
                operator: Contains
                selector: UserAgent
                transforms: []
              - matchValue:
                  - <?php
                  - ?>
                matchVariable: QueryString
                negateCondition: false
                operator: Contains
                selector: search
                transforms:
                  - UrlDecode
                  - Lowercase                
            name: CustomRule1
            priority: 2
      location: WestUs
      managedRules:
        managedRuleSets:
          - ruleGroupOverrides:
              - ruleGroupName: Group1
                rules:
                  - action: Redirect
                    enabledState: Enabled
                    ruleId: GROUP1-0001
                  - enabledState: Disabled
                    ruleId: GROUP1-0002
            ruleSetType: DefaultRuleSet
            ruleSetVersion: preview-1.0
      policyName: MicrosoftCdnWafPolicy
      policySettings:
        defaultCustomBlockResponseBody: PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==
        defaultCustomBlockResponseStatusCode: 200
        defaultRedirectUrl: http://www.bing.com
      rateLimitRules:
        rules:
          - action: Block
            enabledState: Enabled
            matchConditions:
              - matchValue:
                  - 192.168.1.0/24
                  - 10.0.0.0/24
                matchVariable: RemoteAddr
                negateCondition: false
                operator: IPMatch
                transforms: []
            name: RateLimitRule1
            priority: 1
            rateLimitDurationInMinutes: 0
            rateLimitThreshold: 1000
      resourceGroupName: rg1
      sku:
        name: Standard_Microsoft

Create Policy Resource

new Policy(name: string, args: PolicyArgs, opts?: CustomResourceOptions);
@overload
def Policy(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           custom_rules: Optional[CustomRuleListArgs] = None,
           location: Optional[str] = None,
           managed_rules: Optional[ManagedRuleSetListArgs] = None,
           policy_name: Optional[str] = None,
           policy_settings: Optional[PolicySettingsArgs] = None,
           rate_limit_rules: Optional[RateLimitRuleListArgs] = None,
           resource_group_name: Optional[str] = None,
           sku: Optional[SkuArgs] = None,
           tags: Optional[Mapping[str, str]] = None)
@overload
def Policy(resource_name: str,
           args: PolicyArgs,
           opts: Optional[ResourceOptions] = None)
func NewPolicy(ctx *Context, name string, args PolicyArgs, opts ...ResourceOption) (*Policy, error)
public Policy(string name, PolicyArgs args, CustomResourceOptions? opts = null)
public Policy(String name, PolicyArgs args)
public Policy(String name, PolicyArgs args, CustomResourceOptions options)

type: azure-native:cdn:Policy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
name string
The unique name of the resource.
args PolicyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args PolicyArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args PolicyArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args PolicyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args PolicyArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Policy Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The Policy resource accepts the following input properties:

ResourceGroupName string

Name of the Resource group within the Azure subscription.

Sku Pulumi.AzureNative.Cdn.Inputs.SkuArgs

The pricing tier (defines a CDN provider, feature list and rate) of the CdnWebApplicationFirewallPolicy.

CustomRules Pulumi.AzureNative.Cdn.Inputs.CustomRuleListArgs

Describes custom rules inside the policy.

Location string

Resource location.

ManagedRules Pulumi.AzureNative.Cdn.Inputs.ManagedRuleSetListArgs

Describes managed rules inside the policy.

PolicyName string

The name of the CdnWebApplicationFirewallPolicy.

PolicySettings Pulumi.AzureNative.Cdn.Inputs.PolicySettingsArgs

Describes policySettings for policy

RateLimitRules Pulumi.AzureNative.Cdn.Inputs.RateLimitRuleListArgs

Describes rate limit rules inside the policy.

Tags Dictionary<string, string>

Resource tags.

ResourceGroupName string

Name of the Resource group within the Azure subscription.

Sku SkuArgs

The pricing tier (defines a CDN provider, feature list and rate) of the CdnWebApplicationFirewallPolicy.

CustomRules CustomRuleListArgs

Describes custom rules inside the policy.

Location string

Resource location.

ManagedRules ManagedRuleSetListArgs

Describes managed rules inside the policy.

PolicyName string

The name of the CdnWebApplicationFirewallPolicy.

PolicySettings PolicySettingsArgs

Describes policySettings for policy

RateLimitRules RateLimitRuleListArgs

Describes rate limit rules inside the policy.

Tags map[string]string

Resource tags.

resourceGroupName String

Name of the Resource group within the Azure subscription.

sku SkuArgs

The pricing tier (defines a CDN provider, feature list and rate) of the CdnWebApplicationFirewallPolicy.

customRules CustomRuleListArgs

Describes custom rules inside the policy.

location String

Resource location.

managedRules ManagedRuleSetListArgs

Describes managed rules inside the policy.

policyName String

The name of the CdnWebApplicationFirewallPolicy.

policySettings PolicySettingsArgs

Describes policySettings for policy

rateLimitRules RateLimitRuleListArgs

Describes rate limit rules inside the policy.

tags Map<String,String>

Resource tags.

resourceGroupName string

Name of the Resource group within the Azure subscription.

sku SkuArgs

The pricing tier (defines a CDN provider, feature list and rate) of the CdnWebApplicationFirewallPolicy.

customRules CustomRuleListArgs

Describes custom rules inside the policy.

location string

Resource location.

managedRules ManagedRuleSetListArgs

Describes managed rules inside the policy.

policyName string

The name of the CdnWebApplicationFirewallPolicy.

policySettings PolicySettingsArgs

Describes policySettings for policy

rateLimitRules RateLimitRuleListArgs

Describes rate limit rules inside the policy.

tags {[key: string]: string}

Resource tags.

resource_group_name str

Name of the Resource group within the Azure subscription.

sku SkuArgs

The pricing tier (defines a CDN provider, feature list and rate) of the CdnWebApplicationFirewallPolicy.

custom_rules CustomRuleListArgs

Describes custom rules inside the policy.

location str

Resource location.

managed_rules ManagedRuleSetListArgs

Describes managed rules inside the policy.

policy_name str

The name of the CdnWebApplicationFirewallPolicy.

policy_settings PolicySettingsArgs

Describes policySettings for policy

rate_limit_rules RateLimitRuleListArgs

Describes rate limit rules inside the policy.

tags Mapping[str, str]

Resource tags.

resourceGroupName String

Name of the Resource group within the Azure subscription.

sku Property Map

The pricing tier (defines a CDN provider, feature list and rate) of the CdnWebApplicationFirewallPolicy.

customRules Property Map

Describes custom rules inside the policy.

location String

Resource location.

managedRules Property Map

Describes managed rules inside the policy.

policyName String

The name of the CdnWebApplicationFirewallPolicy.

policySettings Property Map

Describes policySettings for policy

rateLimitRules Property Map

Describes rate limit rules inside the policy.

tags Map<String>

Resource tags.

Outputs

All input properties are implicitly available as output properties. Additionally, the Policy resource produces the following output properties:

EndpointLinks List<Pulumi.AzureNative.Cdn.Outputs.CdnEndpointResponse>

Describes Azure CDN endpoints associated with this Web Application Firewall policy.

Id string

The provider-assigned unique ID for this managed resource.

Name string

Resource name.

ProvisioningState string

Provisioning state of the WebApplicationFirewallPolicy.

ResourceState string
SystemData Pulumi.AzureNative.Cdn.Outputs.SystemDataResponse

Read only system data

Type string

Resource type.

Etag string

Gets a unique read-only string that changes whenever the resource is updated.

EndpointLinks []CdnEndpointResponse

Describes Azure CDN endpoints associated with this Web Application Firewall policy.

Id string

The provider-assigned unique ID for this managed resource.

Name string

Resource name.

ProvisioningState string

Provisioning state of the WebApplicationFirewallPolicy.

ResourceState string
SystemData SystemDataResponse

Read only system data

Type string

Resource type.

Etag string

Gets a unique read-only string that changes whenever the resource is updated.

endpointLinks List<CdnEndpointResponse>

Describes Azure CDN endpoints associated with this Web Application Firewall policy.

id String

The provider-assigned unique ID for this managed resource.

name String

Resource name.

provisioningState String

Provisioning state of the WebApplicationFirewallPolicy.

resourceState String
systemData SystemDataResponse

Read only system data

type String

Resource type.

etag String

Gets a unique read-only string that changes whenever the resource is updated.

endpointLinks CdnEndpointResponse[]

Describes Azure CDN endpoints associated with this Web Application Firewall policy.

id string

The provider-assigned unique ID for this managed resource.

name string

Resource name.

provisioningState string

Provisioning state of the WebApplicationFirewallPolicy.

resourceState string
systemData SystemDataResponse

Read only system data

type string

Resource type.

etag string

Gets a unique read-only string that changes whenever the resource is updated.

endpoint_links Sequence[CdnEndpointResponse]

Describes Azure CDN endpoints associated with this Web Application Firewall policy.

id str

The provider-assigned unique ID for this managed resource.

name str

Resource name.

provisioning_state str

Provisioning state of the WebApplicationFirewallPolicy.

resource_state str
system_data SystemDataResponse

Read only system data

type str

Resource type.

etag str

Gets a unique read-only string that changes whenever the resource is updated.

endpointLinks List<Property Map>

Describes Azure CDN endpoints associated with this Web Application Firewall policy.

id String

The provider-assigned unique ID for this managed resource.

name String

Resource name.

provisioningState String

Provisioning state of the WebApplicationFirewallPolicy.

resourceState String
systemData Property Map

Read only system data

type String

Resource type.

etag String

Gets a unique read-only string that changes whenever the resource is updated.

Supporting Types

ActionType

Allow
Allow
Block
Block
Log
Log
Redirect
Redirect
ActionTypeAllow
Allow
ActionTypeBlock
Block
ActionTypeLog
Log
ActionTypeRedirect
Redirect
Allow
Allow
Block
Block
Log
Log
Redirect
Redirect
Allow
Allow
Block
Block
Log
Log
Redirect
Redirect
ALLOW
Allow
BLOCK
Block
LOG
Log
REDIRECT
Redirect
"Allow"
Allow
"Block"
Block
"Log"
Log
"Redirect"
Redirect

CdnEndpointResponse

Id string

ARM Resource ID string.

Id string

ARM Resource ID string.

id String

ARM Resource ID string.

id string

ARM Resource ID string.

id str

ARM Resource ID string.

id String

ARM Resource ID string.

CustomRule

Action string | Pulumi.AzureNative.Cdn.ActionType

Describes what action to be applied when rule matches

MatchConditions List<Pulumi.AzureNative.Cdn.Inputs.MatchCondition>

List of match conditions.

Name string

Defines the name of the custom rule

Priority int

Defines in what order this rule be evaluated in the overall list of custom rules

EnabledState string | Pulumi.AzureNative.Cdn.CustomRuleEnabledState

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

Action string | ActionType

Describes what action to be applied when rule matches

MatchConditions []MatchCondition

List of match conditions.

Name string

Defines the name of the custom rule

Priority int

Defines in what order this rule be evaluated in the overall list of custom rules

EnabledState string | CustomRuleEnabledState

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action String | ActionType

Describes what action to be applied when rule matches

matchConditions List<MatchCondition>

List of match conditions.

name String

Defines the name of the custom rule

priority Integer

Defines in what order this rule be evaluated in the overall list of custom rules

enabledState String | CustomRuleEnabledState

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action string | ActionType

Describes what action to be applied when rule matches

matchConditions MatchCondition[]

List of match conditions.

name string

Defines the name of the custom rule

priority number

Defines in what order this rule be evaluated in the overall list of custom rules

enabledState string | CustomRuleEnabledState

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action str | ActionType

Describes what action to be applied when rule matches

match_conditions Sequence[MatchCondition]

List of match conditions.

name str

Defines the name of the custom rule

priority int

Defines in what order this rule be evaluated in the overall list of custom rules

enabled_state str | CustomRuleEnabledState

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action String | "Allow" | "Block" | "Log" | "Redirect"

Describes what action to be applied when rule matches

matchConditions List<Property Map>

List of match conditions.

name String

Defines the name of the custom rule

priority Number

Defines in what order this rule be evaluated in the overall list of custom rules

enabledState String | "Disabled" | "Enabled"

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

CustomRuleEnabledState

Disabled
Disabled
Enabled
Enabled
CustomRuleEnabledStateDisabled
Disabled
CustomRuleEnabledStateEnabled
Enabled
Disabled
Disabled
Enabled
Enabled
Disabled
Disabled
Enabled
Enabled
DISABLED
Disabled
ENABLED
Enabled
"Disabled"
Disabled
"Enabled"
Enabled

CustomRuleList

Rules []CustomRule

List of rules

rules List<CustomRule>

List of rules

rules CustomRule[]

List of rules

CustomRuleListResponse

CustomRuleResponse

Action string

Describes what action to be applied when rule matches

MatchConditions List<Pulumi.AzureNative.Cdn.Inputs.MatchConditionResponse>

List of match conditions.

Name string

Defines the name of the custom rule

Priority int

Defines in what order this rule be evaluated in the overall list of custom rules

EnabledState string

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

Action string

Describes what action to be applied when rule matches

MatchConditions []MatchConditionResponse

List of match conditions.

Name string

Defines the name of the custom rule

Priority int

Defines in what order this rule be evaluated in the overall list of custom rules

EnabledState string

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action String

Describes what action to be applied when rule matches

matchConditions List<MatchConditionResponse>

List of match conditions.

name String

Defines the name of the custom rule

priority Integer

Defines in what order this rule be evaluated in the overall list of custom rules

enabledState String

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action string

Describes what action to be applied when rule matches

matchConditions MatchConditionResponse[]

List of match conditions.

name string

Defines the name of the custom rule

priority number

Defines in what order this rule be evaluated in the overall list of custom rules

enabledState string

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action str

Describes what action to be applied when rule matches

match_conditions Sequence[MatchConditionResponse]

List of match conditions.

name str

Defines the name of the custom rule

priority int

Defines in what order this rule be evaluated in the overall list of custom rules

enabled_state str

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action String

Describes what action to be applied when rule matches

matchConditions List<Property Map>

List of match conditions.

name String

Defines the name of the custom rule

priority Number

Defines in what order this rule be evaluated in the overall list of custom rules

enabledState String

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

ManagedRuleEnabledState

Disabled
Disabled
Enabled
Enabled
ManagedRuleEnabledStateDisabled
Disabled
ManagedRuleEnabledStateEnabled
Enabled
Disabled
Disabled
Enabled
Enabled
Disabled
Disabled
Enabled
Enabled
DISABLED
Disabled
ENABLED
Enabled
"Disabled"
Disabled
"Enabled"
Enabled

ManagedRuleGroupOverride

RuleGroupName string

Describes the managed rule group within the rule set to override

Rules List<Pulumi.AzureNative.Cdn.Inputs.ManagedRuleOverride>

List of rules that will be disabled. If none specified, all rules in the group will be disabled.

RuleGroupName string

Describes the managed rule group within the rule set to override

Rules []ManagedRuleOverride

List of rules that will be disabled. If none specified, all rules in the group will be disabled.

ruleGroupName String

Describes the managed rule group within the rule set to override

rules List<ManagedRuleOverride>

List of rules that will be disabled. If none specified, all rules in the group will be disabled.

ruleGroupName string

Describes the managed rule group within the rule set to override

rules ManagedRuleOverride[]

List of rules that will be disabled. If none specified, all rules in the group will be disabled.

rule_group_name str

Describes the managed rule group within the rule set to override

rules Sequence[ManagedRuleOverride]

List of rules that will be disabled. If none specified, all rules in the group will be disabled.

ruleGroupName String

Describes the managed rule group within the rule set to override

rules List<Property Map>

List of rules that will be disabled. If none specified, all rules in the group will be disabled.

ManagedRuleGroupOverrideResponse

RuleGroupName string

Describes the managed rule group within the rule set to override

Rules List<Pulumi.AzureNative.Cdn.Inputs.ManagedRuleOverrideResponse>

List of rules that will be disabled. If none specified, all rules in the group will be disabled.

RuleGroupName string

Describes the managed rule group within the rule set to override

Rules []ManagedRuleOverrideResponse

List of rules that will be disabled. If none specified, all rules in the group will be disabled.

ruleGroupName String

Describes the managed rule group within the rule set to override

rules List<ManagedRuleOverrideResponse>

List of rules that will be disabled. If none specified, all rules in the group will be disabled.

ruleGroupName string

Describes the managed rule group within the rule set to override

rules ManagedRuleOverrideResponse[]

List of rules that will be disabled. If none specified, all rules in the group will be disabled.

rule_group_name str

Describes the managed rule group within the rule set to override

rules Sequence[ManagedRuleOverrideResponse]

List of rules that will be disabled. If none specified, all rules in the group will be disabled.

ruleGroupName String

Describes the managed rule group within the rule set to override

rules List<Property Map>

List of rules that will be disabled. If none specified, all rules in the group will be disabled.

ManagedRuleOverride

RuleId string

Identifier for the managed rule.

Action string | Pulumi.AzureNative.Cdn.ActionType

Describes the override action to be applied when rule matches.

EnabledState string | Pulumi.AzureNative.Cdn.ManagedRuleEnabledState

Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

RuleId string

Identifier for the managed rule.

Action string | ActionType

Describes the override action to be applied when rule matches.

EnabledState string | ManagedRuleEnabledState

Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

ruleId String

Identifier for the managed rule.

action String | ActionType

Describes the override action to be applied when rule matches.

enabledState String | ManagedRuleEnabledState

Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

ruleId string

Identifier for the managed rule.

action string | ActionType

Describes the override action to be applied when rule matches.

enabledState string | ManagedRuleEnabledState

Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

rule_id str

Identifier for the managed rule.

action str | ActionType

Describes the override action to be applied when rule matches.

enabled_state str | ManagedRuleEnabledState

Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

ruleId String

Identifier for the managed rule.

action String | "Allow" | "Block" | "Log" | "Redirect"

Describes the override action to be applied when rule matches.

enabledState String | "Disabled" | "Enabled"

Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

ManagedRuleOverrideResponse

RuleId string

Identifier for the managed rule.

Action string

Describes the override action to be applied when rule matches.

EnabledState string

Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

RuleId string

Identifier for the managed rule.

Action string

Describes the override action to be applied when rule matches.

EnabledState string

Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

ruleId String

Identifier for the managed rule.

action String

Describes the override action to be applied when rule matches.

enabledState String

Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

ruleId string

Identifier for the managed rule.

action string

Describes the override action to be applied when rule matches.

enabledState string

Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

rule_id str

Identifier for the managed rule.

action str

Describes the override action to be applied when rule matches.

enabled_state str

Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

ruleId String

Identifier for the managed rule.

action String

Describes the override action to be applied when rule matches.

enabledState String

Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

ManagedRuleSet

RuleSetType string

Defines the rule set type to use.

RuleSetVersion string

Defines the version of the rule set to use.

AnomalyScore int

Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.

RuleGroupOverrides List<Pulumi.AzureNative.Cdn.Inputs.ManagedRuleGroupOverride>

Defines the rule overrides to apply to the rule set.

RuleSetType string

Defines the rule set type to use.

RuleSetVersion string

Defines the version of the rule set to use.

AnomalyScore int

Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.

RuleGroupOverrides []ManagedRuleGroupOverride

Defines the rule overrides to apply to the rule set.

ruleSetType String

Defines the rule set type to use.

ruleSetVersion String

Defines the version of the rule set to use.

anomalyScore Integer

Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.

ruleGroupOverrides List<ManagedRuleGroupOverride>

Defines the rule overrides to apply to the rule set.

ruleSetType string

Defines the rule set type to use.

ruleSetVersion string

Defines the version of the rule set to use.

anomalyScore number

Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.

ruleGroupOverrides ManagedRuleGroupOverride[]

Defines the rule overrides to apply to the rule set.

rule_set_type str

Defines the rule set type to use.

rule_set_version str

Defines the version of the rule set to use.

anomaly_score int

Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.

rule_group_overrides Sequence[ManagedRuleGroupOverride]

Defines the rule overrides to apply to the rule set.

ruleSetType String

Defines the rule set type to use.

ruleSetVersion String

Defines the version of the rule set to use.

anomalyScore Number

Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.

ruleGroupOverrides List<Property Map>

Defines the rule overrides to apply to the rule set.

ManagedRuleSetList

ManagedRuleSetListResponse

ManagedRuleSetResponse

RuleSetType string

Defines the rule set type to use.

RuleSetVersion string

Defines the version of the rule set to use.

AnomalyScore int

Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.

RuleGroupOverrides List<Pulumi.AzureNative.Cdn.Inputs.ManagedRuleGroupOverrideResponse>

Defines the rule overrides to apply to the rule set.

RuleSetType string

Defines the rule set type to use.

RuleSetVersion string

Defines the version of the rule set to use.

AnomalyScore int

Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.

RuleGroupOverrides []ManagedRuleGroupOverrideResponse

Defines the rule overrides to apply to the rule set.

ruleSetType String

Defines the rule set type to use.

ruleSetVersion String

Defines the version of the rule set to use.

anomalyScore Integer

Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.

ruleGroupOverrides List<ManagedRuleGroupOverrideResponse>

Defines the rule overrides to apply to the rule set.

ruleSetType string

Defines the rule set type to use.

ruleSetVersion string

Defines the version of the rule set to use.

anomalyScore number

Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.

ruleGroupOverrides ManagedRuleGroupOverrideResponse[]

Defines the rule overrides to apply to the rule set.

rule_set_type str

Defines the rule set type to use.

rule_set_version str

Defines the version of the rule set to use.

anomaly_score int

Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.

rule_group_overrides Sequence[ManagedRuleGroupOverrideResponse]

Defines the rule overrides to apply to the rule set.

ruleSetType String

Defines the rule set type to use.

ruleSetVersion String

Defines the version of the rule set to use.

anomalyScore Number

Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.

ruleGroupOverrides List<Property Map>

Defines the rule overrides to apply to the rule set.

MatchCondition

MatchValue List<string>

List of possible match values.

MatchVariable string | Pulumi.AzureNative.Cdn.MatchVariable

Match variable to compare against.

Operator string | Pulumi.AzureNative.Cdn.Operator

Describes operator to be matched

NegateCondition bool

Describes if the result of this condition should be negated.

Selector string

Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.

Transforms List<Union<string, Pulumi.AzureNative.Cdn.TransformType>>

List of transforms.

MatchValue []string

List of possible match values.

MatchVariable string | MatchVariable

Match variable to compare against.

Operator string | Operator

Describes operator to be matched

NegateCondition bool

Describes if the result of this condition should be negated.

Selector string

Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.

Transforms []string

List of transforms.

matchValue List<String>

List of possible match values.

matchVariable String | MatchVariable

Match variable to compare against.

operator String | Operator

Describes operator to be matched

negateCondition Boolean

Describes if the result of this condition should be negated.

selector String

Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.

transforms List<Either<String,TransformType>>

List of transforms.

matchValue string[]

List of possible match values.

matchVariable string | MatchVariable

Match variable to compare against.

operator string | Operator

Describes operator to be matched

negateCondition boolean

Describes if the result of this condition should be negated.

selector string

Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.

transforms (string | TransformType)[]

List of transforms.

match_value Sequence[str]

List of possible match values.

match_variable str | MatchVariable

Match variable to compare against.

operator str | Operator

Describes operator to be matched

negate_condition bool

Describes if the result of this condition should be negated.

selector str

Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.

transforms Sequence[Union[str, TransformType]]

List of transforms.

matchValue List<String>

List of possible match values.

matchVariable String | "RemoteAddress" | "RequestMethod" | "QueryString" | "PostArgs" | "RequestUri" | "RequestHeader" | "RequestBody" | "RequestScheme" | "UrlPath" | "UrlFileExtension" | "UrlFileName" | "HttpVersion" | "Cookies" | "IsDevice"

Match variable to compare against.

operator String | "Any" | "IPMatch" | "GeoMatch" | "Equal" | "Contains" | "LessThan" | "GreaterThan" | "LessThanOrEqual" | "GreaterThanOrEqual" | "BeginsWith" | "EndsWith" | "RegEx"

Describes operator to be matched

negateCondition Boolean

Describes if the result of this condition should be negated.

selector String

Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.

transforms List<String | "Lowercase" | "Uppercase" | "Trim" | "UrlDecode" | "UrlEncode" | "RemoveNulls">

List of transforms.

MatchConditionResponse

MatchValue List<string>

List of possible match values.

MatchVariable string

Match variable to compare against.

Operator string

Describes operator to be matched

NegateCondition bool

Describes if the result of this condition should be negated.

Selector string

Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.

Transforms List<string>

List of transforms.

MatchValue []string

List of possible match values.

MatchVariable string

Match variable to compare against.

Operator string

Describes operator to be matched

NegateCondition bool

Describes if the result of this condition should be negated.

Selector string

Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.

Transforms []string

List of transforms.

matchValue List<String>

List of possible match values.

matchVariable String

Match variable to compare against.

operator String

Describes operator to be matched

negateCondition Boolean

Describes if the result of this condition should be negated.

selector String

Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.

transforms List<String>

List of transforms.

matchValue string[]

List of possible match values.

matchVariable string

Match variable to compare against.

operator string

Describes operator to be matched

negateCondition boolean

Describes if the result of this condition should be negated.

selector string

Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.

transforms string[]

List of transforms.

match_value Sequence[str]

List of possible match values.

match_variable str

Match variable to compare against.

operator str

Describes operator to be matched

negate_condition bool

Describes if the result of this condition should be negated.

selector str

Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.

transforms Sequence[str]

List of transforms.

matchValue List<String>

List of possible match values.

matchVariable String

Match variable to compare against.

operator String

Describes operator to be matched

negateCondition Boolean

Describes if the result of this condition should be negated.

selector String

Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.

transforms List<String>

List of transforms.

MatchVariable

RemoteAddress
RemoteAddress
RequestMethod
RequestMethod
QueryString
QueryString
PostArgs
PostArgs
RequestUri
RequestUri
RequestHeader
RequestHeader
RequestBody
RequestBody
RequestScheme
RequestScheme
UrlPath
UrlPath
UrlFileExtension
UrlFileExtension
UrlFileName
UrlFileName
HttpVersion
HttpVersion
Cookies
Cookies
IsDevice
IsDevice
MatchVariableRemoteAddress
RemoteAddress
MatchVariableRequestMethod
RequestMethod
MatchVariableQueryString
QueryString
MatchVariablePostArgs
PostArgs
MatchVariableRequestUri
RequestUri
MatchVariableRequestHeader
RequestHeader
MatchVariableRequestBody
RequestBody
MatchVariableRequestScheme
RequestScheme
MatchVariableUrlPath
UrlPath
MatchVariableUrlFileExtension
UrlFileExtension
MatchVariableUrlFileName
UrlFileName
MatchVariableHttpVersion
HttpVersion
MatchVariableCookies
Cookies
MatchVariableIsDevice
IsDevice
RemoteAddress
RemoteAddress
RequestMethod
RequestMethod
QueryString
QueryString
PostArgs
PostArgs
RequestUri
RequestUri
RequestHeader
RequestHeader
RequestBody
RequestBody
RequestScheme
RequestScheme
UrlPath
UrlPath
UrlFileExtension
UrlFileExtension
UrlFileName
UrlFileName
HttpVersion
HttpVersion
Cookies
Cookies
IsDevice
IsDevice
RemoteAddress
RemoteAddress
RequestMethod
RequestMethod
QueryString
QueryString
PostArgs
PostArgs
RequestUri
RequestUri
RequestHeader
RequestHeader
RequestBody
RequestBody
RequestScheme
RequestScheme
UrlPath
UrlPath
UrlFileExtension
UrlFileExtension
UrlFileName
UrlFileName
HttpVersion
HttpVersion
Cookies
Cookies
IsDevice
IsDevice
REMOTE_ADDRESS
RemoteAddress
REQUEST_METHOD
RequestMethod
QUERY_STRING
QueryString
POST_ARGS
PostArgs
REQUEST_URI
RequestUri
REQUEST_HEADER
RequestHeader
REQUEST_BODY
RequestBody
REQUEST_SCHEME
RequestScheme
URL_PATH
UrlPath
URL_FILE_EXTENSION
UrlFileExtension
URL_FILE_NAME
UrlFileName
HTTP_VERSION
HttpVersion
COOKIES
Cookies
IS_DEVICE
IsDevice
"RemoteAddress"
RemoteAddress
"RequestMethod"
RequestMethod
"QueryString"
QueryString
"PostArgs"
PostArgs
"RequestUri"
RequestUri
"RequestHeader"
RequestHeader
"RequestBody"
RequestBody
"RequestScheme"
RequestScheme
"UrlPath"
UrlPath
"UrlFileExtension"
UrlFileExtension
"UrlFileName"
UrlFileName
"HttpVersion"
HttpVersion
"Cookies"
Cookies
"IsDevice"
IsDevice

Operator

Any
Any
IPMatch
IPMatch
GeoMatch
GeoMatch
Equal
Equal
Contains
Contains
LessThan
LessThan
GreaterThan
GreaterThan
LessThanOrEqual
LessThanOrEqual
GreaterThanOrEqual
GreaterThanOrEqual
BeginsWith
BeginsWith
EndsWith
EndsWith
RegEx
RegEx
OperatorAny
Any
OperatorIPMatch
IPMatch
OperatorGeoMatch
GeoMatch
OperatorEqual
Equal
OperatorContains
Contains
OperatorLessThan
LessThan
OperatorGreaterThan
GreaterThan
OperatorLessThanOrEqual
LessThanOrEqual
OperatorGreaterThanOrEqual
GreaterThanOrEqual
OperatorBeginsWith
BeginsWith
OperatorEndsWith
EndsWith
OperatorRegEx
RegEx
Any
Any
IPMatch
IPMatch
GeoMatch
GeoMatch
Equal
Equal
Contains
Contains
LessThan
LessThan
GreaterThan
GreaterThan
LessThanOrEqual
LessThanOrEqual
GreaterThanOrEqual
GreaterThanOrEqual
BeginsWith
BeginsWith
EndsWith
EndsWith
RegEx
RegEx
Any
Any
IPMatch
IPMatch
GeoMatch
GeoMatch
Equal
Equal
Contains
Contains
LessThan
LessThan
GreaterThan
GreaterThan
LessThanOrEqual
LessThanOrEqual
GreaterThanOrEqual
GreaterThanOrEqual
BeginsWith
BeginsWith
EndsWith
EndsWith
RegEx
RegEx
ANY
Any
IP_MATCH
IPMatch
GEO_MATCH
GeoMatch
EQUAL
Equal
CONTAINS
Contains
LESS_THAN
LessThan
GREATER_THAN
GreaterThan
LESS_THAN_OR_EQUAL
LessThanOrEqual
GREATER_THAN_OR_EQUAL
GreaterThanOrEqual
BEGINS_WITH
BeginsWith
ENDS_WITH
EndsWith
REG_EX
RegEx
"Any"
Any
"IPMatch"
IPMatch
"GeoMatch"
GeoMatch
"Equal"
Equal
"Contains"
Contains
"LessThan"
LessThan
"GreaterThan"
GreaterThan
"LessThanOrEqual"
LessThanOrEqual
"GreaterThanOrEqual"
GreaterThanOrEqual
"BeginsWith"
BeginsWith
"EndsWith"
EndsWith
"RegEx"
RegEx

PolicyEnabledState

Disabled
Disabled
Enabled
Enabled
PolicyEnabledStateDisabled
Disabled
PolicyEnabledStateEnabled
Enabled
Disabled
Disabled
Enabled
Enabled
Disabled
Disabled
Enabled
Enabled
DISABLED
Disabled
ENABLED
Enabled
"Disabled"
Disabled
"Enabled"
Enabled

PolicyMode

Prevention
Prevention
Detection
Detection
PolicyModePrevention
Prevention
PolicyModeDetection
Detection
Prevention
Prevention
Detection
Detection
Prevention
Prevention
Detection
Detection
PREVENTION
Prevention
DETECTION
Detection
"Prevention"
Prevention
"Detection"
Detection

PolicySettings

DefaultCustomBlockResponseBody string

If the action type is block, customer can override the response body. The body must be specified in base64 encoding.

DefaultCustomBlockResponseStatusCode int

If the action type is block, this field defines the default customer overridable http response status code.

DefaultRedirectUrl string

If action type is redirect, this field represents the default redirect URL for the client.

EnabledState string | Pulumi.AzureNative.Cdn.PolicyEnabledState

describes if the policy is in enabled state or disabled state

Mode string | Pulumi.AzureNative.Cdn.PolicyMode

Describes if it is in detection mode or prevention mode at policy level.

DefaultCustomBlockResponseBody string

If the action type is block, customer can override the response body. The body must be specified in base64 encoding.

DefaultCustomBlockResponseStatusCode int

If the action type is block, this field defines the default customer overridable http response status code.

DefaultRedirectUrl string

If action type is redirect, this field represents the default redirect URL for the client.

EnabledState string | PolicyEnabledState

describes if the policy is in enabled state or disabled state

Mode string | PolicyMode

Describes if it is in detection mode or prevention mode at policy level.

defaultCustomBlockResponseBody String

If the action type is block, customer can override the response body. The body must be specified in base64 encoding.

defaultCustomBlockResponseStatusCode Integer

If the action type is block, this field defines the default customer overridable http response status code.

defaultRedirectUrl String

If action type is redirect, this field represents the default redirect URL for the client.

enabledState String | PolicyEnabledState

describes if the policy is in enabled state or disabled state

mode String | PolicyMode

Describes if it is in detection mode or prevention mode at policy level.

defaultCustomBlockResponseBody string

If the action type is block, customer can override the response body. The body must be specified in base64 encoding.

defaultCustomBlockResponseStatusCode number

If the action type is block, this field defines the default customer overridable http response status code.

defaultRedirectUrl string

If action type is redirect, this field represents the default redirect URL for the client.

enabledState string | PolicyEnabledState

describes if the policy is in enabled state or disabled state

mode string | PolicyMode

Describes if it is in detection mode or prevention mode at policy level.

default_custom_block_response_body str

If the action type is block, customer can override the response body. The body must be specified in base64 encoding.

default_custom_block_response_status_code int

If the action type is block, this field defines the default customer overridable http response status code.

default_redirect_url str

If action type is redirect, this field represents the default redirect URL for the client.

enabled_state str | PolicyEnabledState

describes if the policy is in enabled state or disabled state

mode str | PolicyMode

Describes if it is in detection mode or prevention mode at policy level.

defaultCustomBlockResponseBody String

If the action type is block, customer can override the response body. The body must be specified in base64 encoding.

defaultCustomBlockResponseStatusCode Number

If the action type is block, this field defines the default customer overridable http response status code.

defaultRedirectUrl String

If action type is redirect, this field represents the default redirect URL for the client.

enabledState String | "Disabled" | "Enabled"

describes if the policy is in enabled state or disabled state

mode String | "Prevention" | "Detection"

Describes if it is in detection mode or prevention mode at policy level.

PolicySettingsResponse

DefaultCustomBlockResponseBody string

If the action type is block, customer can override the response body. The body must be specified in base64 encoding.

DefaultCustomBlockResponseStatusCode int

If the action type is block, this field defines the default customer overridable http response status code.

DefaultRedirectUrl string

If action type is redirect, this field represents the default redirect URL for the client.

EnabledState string

describes if the policy is in enabled state or disabled state

Mode string

Describes if it is in detection mode or prevention mode at policy level.

DefaultCustomBlockResponseBody string

If the action type is block, customer can override the response body. The body must be specified in base64 encoding.

DefaultCustomBlockResponseStatusCode int

If the action type is block, this field defines the default customer overridable http response status code.

DefaultRedirectUrl string

If action type is redirect, this field represents the default redirect URL for the client.

EnabledState string

describes if the policy is in enabled state or disabled state

Mode string

Describes if it is in detection mode or prevention mode at policy level.

defaultCustomBlockResponseBody String

If the action type is block, customer can override the response body. The body must be specified in base64 encoding.

defaultCustomBlockResponseStatusCode Integer

If the action type is block, this field defines the default customer overridable http response status code.

defaultRedirectUrl String

If action type is redirect, this field represents the default redirect URL for the client.

enabledState String

describes if the policy is in enabled state or disabled state

mode String

Describes if it is in detection mode or prevention mode at policy level.

defaultCustomBlockResponseBody string

If the action type is block, customer can override the response body. The body must be specified in base64 encoding.

defaultCustomBlockResponseStatusCode number

If the action type is block, this field defines the default customer overridable http response status code.

defaultRedirectUrl string

If action type is redirect, this field represents the default redirect URL for the client.

enabledState string

describes if the policy is in enabled state or disabled state

mode string

Describes if it is in detection mode or prevention mode at policy level.

default_custom_block_response_body str

If the action type is block, customer can override the response body. The body must be specified in base64 encoding.

default_custom_block_response_status_code int

If the action type is block, this field defines the default customer overridable http response status code.

default_redirect_url str

If action type is redirect, this field represents the default redirect URL for the client.

enabled_state str

describes if the policy is in enabled state or disabled state

mode str

Describes if it is in detection mode or prevention mode at policy level.

defaultCustomBlockResponseBody String

If the action type is block, customer can override the response body. The body must be specified in base64 encoding.

defaultCustomBlockResponseStatusCode Number

If the action type is block, this field defines the default customer overridable http response status code.

defaultRedirectUrl String

If action type is redirect, this field represents the default redirect URL for the client.

enabledState String

describes if the policy is in enabled state or disabled state

mode String

Describes if it is in detection mode or prevention mode at policy level.

RateLimitRule

Action string | Pulumi.AzureNative.Cdn.ActionType

Describes what action to be applied when rule matches

MatchConditions List<Pulumi.AzureNative.Cdn.Inputs.MatchCondition>

List of match conditions.

Name string

Defines the name of the custom rule

Priority int

Defines in what order this rule be evaluated in the overall list of custom rules

RateLimitDurationInMinutes int

Defines rate limit duration. Default is 1 minute.

RateLimitThreshold int

Defines rate limit threshold.

EnabledState string | Pulumi.AzureNative.Cdn.CustomRuleEnabledState

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

Action string | ActionType

Describes what action to be applied when rule matches

MatchConditions []MatchCondition

List of match conditions.

Name string

Defines the name of the custom rule

Priority int

Defines in what order this rule be evaluated in the overall list of custom rules

RateLimitDurationInMinutes int

Defines rate limit duration. Default is 1 minute.

RateLimitThreshold int

Defines rate limit threshold.

EnabledState string | CustomRuleEnabledState

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action String | ActionType

Describes what action to be applied when rule matches

matchConditions List<MatchCondition>

List of match conditions.

name String

Defines the name of the custom rule

priority Integer

Defines in what order this rule be evaluated in the overall list of custom rules

rateLimitDurationInMinutes Integer

Defines rate limit duration. Default is 1 minute.

rateLimitThreshold Integer

Defines rate limit threshold.

enabledState String | CustomRuleEnabledState

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action string | ActionType

Describes what action to be applied when rule matches

matchConditions MatchCondition[]

List of match conditions.

name string

Defines the name of the custom rule

priority number

Defines in what order this rule be evaluated in the overall list of custom rules

rateLimitDurationInMinutes number

Defines rate limit duration. Default is 1 minute.

rateLimitThreshold number

Defines rate limit threshold.

enabledState string | CustomRuleEnabledState

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action str | ActionType

Describes what action to be applied when rule matches

match_conditions Sequence[MatchCondition]

List of match conditions.

name str

Defines the name of the custom rule

priority int

Defines in what order this rule be evaluated in the overall list of custom rules

rate_limit_duration_in_minutes int

Defines rate limit duration. Default is 1 minute.

rate_limit_threshold int

Defines rate limit threshold.

enabled_state str | CustomRuleEnabledState

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action String | "Allow" | "Block" | "Log" | "Redirect"

Describes what action to be applied when rule matches

matchConditions List<Property Map>

List of match conditions.

name String

Defines the name of the custom rule

priority Number

Defines in what order this rule be evaluated in the overall list of custom rules

rateLimitDurationInMinutes Number

Defines rate limit duration. Default is 1 minute.

rateLimitThreshold Number

Defines rate limit threshold.

enabledState String | "Disabled" | "Enabled"

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

RateLimitRuleList

Rules []RateLimitRule

List of rules

rules RateLimitRule[]

List of rules

RateLimitRuleListResponse

RateLimitRuleResponse

Action string

Describes what action to be applied when rule matches

MatchConditions List<Pulumi.AzureNative.Cdn.Inputs.MatchConditionResponse>

List of match conditions.

Name string

Defines the name of the custom rule

Priority int

Defines in what order this rule be evaluated in the overall list of custom rules

RateLimitDurationInMinutes int

Defines rate limit duration. Default is 1 minute.

RateLimitThreshold int

Defines rate limit threshold.

EnabledState string

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

Action string

Describes what action to be applied when rule matches

MatchConditions []MatchConditionResponse

List of match conditions.

Name string

Defines the name of the custom rule

Priority int

Defines in what order this rule be evaluated in the overall list of custom rules

RateLimitDurationInMinutes int

Defines rate limit duration. Default is 1 minute.

RateLimitThreshold int

Defines rate limit threshold.

EnabledState string

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action String

Describes what action to be applied when rule matches

matchConditions List<MatchConditionResponse>

List of match conditions.

name String

Defines the name of the custom rule

priority Integer

Defines in what order this rule be evaluated in the overall list of custom rules

rateLimitDurationInMinutes Integer

Defines rate limit duration. Default is 1 minute.

rateLimitThreshold Integer

Defines rate limit threshold.

enabledState String

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action string

Describes what action to be applied when rule matches

matchConditions MatchConditionResponse[]

List of match conditions.

name string

Defines the name of the custom rule

priority number

Defines in what order this rule be evaluated in the overall list of custom rules

rateLimitDurationInMinutes number

Defines rate limit duration. Default is 1 minute.

rateLimitThreshold number

Defines rate limit threshold.

enabledState string

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action str

Describes what action to be applied when rule matches

match_conditions Sequence[MatchConditionResponse]

List of match conditions.

name str

Defines the name of the custom rule

priority int

Defines in what order this rule be evaluated in the overall list of custom rules

rate_limit_duration_in_minutes int

Defines rate limit duration. Default is 1 minute.

rate_limit_threshold int

Defines rate limit threshold.

enabled_state str

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action String

Describes what action to be applied when rule matches

matchConditions List<Property Map>

List of match conditions.

name String

Defines the name of the custom rule

priority Number

Defines in what order this rule be evaluated in the overall list of custom rules

rateLimitDurationInMinutes Number

Defines rate limit duration. Default is 1 minute.

rateLimitThreshold Number

Defines rate limit threshold.

enabledState String

Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

Sku

Name string | Pulumi.AzureNative.Cdn.SkuName

Name of the pricing tier.

Name string | SkuName

Name of the pricing tier.

name String | SkuName

Name of the pricing tier.

name string | SkuName

Name of the pricing tier.

name str | SkuName

Name of the pricing tier.

SkuName

Standard_Verizon
Standard_Verizon
Premium_Verizon
Premium_Verizon
Custom_Verizon
Custom_Verizon
Standard_Akamai
Standard_Akamai
Standard_ChinaCdn
Standard_ChinaCdn
Standard_Microsoft
Standard_Microsoft
Premium_ChinaCdn
Premium_ChinaCdn
Standard_AzureFrontDoor
Standard_AzureFrontDoor
Premium_AzureFrontDoor
Premium_AzureFrontDoor
Standard_955BandWidth_ChinaCdn
Standard_955BandWidth_ChinaCdn
Standard_AvgBandWidth_ChinaCdn
Standard_AvgBandWidth_ChinaCdn
StandardPlus_ChinaCdn
StandardPlus_ChinaCdn
StandardPlus_955BandWidth_ChinaCdn
StandardPlus_955BandWidth_ChinaCdn
StandardPlus_AvgBandWidth_ChinaCdn
StandardPlus_AvgBandWidth_ChinaCdn
SkuName_Standard_Verizon
Standard_Verizon
SkuName_Premium_Verizon
Premium_Verizon
SkuName_Custom_Verizon
Custom_Verizon
SkuName_Standard_Akamai
Standard_Akamai
SkuName_Standard_ChinaCdn
Standard_ChinaCdn
SkuName_Standard_Microsoft
Standard_Microsoft
SkuName_Premium_ChinaCdn
Premium_ChinaCdn
SkuName_Standard_AzureFrontDoor
Standard_AzureFrontDoor
SkuName_Premium_AzureFrontDoor
Premium_AzureFrontDoor
SkuName_Standard_955BandWidth_ChinaCdn
Standard_955BandWidth_ChinaCdn
SkuName_Standard_AvgBandWidth_ChinaCdn
Standard_AvgBandWidth_ChinaCdn
SkuName_StandardPlus_ChinaCdn
StandardPlus_ChinaCdn
SkuName_StandardPlus_955BandWidth_ChinaCdn
StandardPlus_955BandWidth_ChinaCdn
SkuName_StandardPlus_AvgBandWidth_ChinaCdn
StandardPlus_AvgBandWidth_ChinaCdn
Standard_Verizon
Standard_Verizon
Premium_Verizon
Premium_Verizon
Custom_Verizon
Custom_Verizon
Standard_Akamai
Standard_Akamai
Standard_ChinaCdn
Standard_ChinaCdn
Standard_Microsoft
Standard_Microsoft
Premium_ChinaCdn
Premium_ChinaCdn
Standard_AzureFrontDoor
Standard_AzureFrontDoor
Premium_AzureFrontDoor
Premium_AzureFrontDoor
Standard_955BandWidth_ChinaCdn
Standard_955BandWidth_ChinaCdn
Standard_AvgBandWidth_ChinaCdn
Standard_AvgBandWidth_ChinaCdn
StandardPlus_ChinaCdn
StandardPlus_ChinaCdn
StandardPlus_955BandWidth_ChinaCdn
StandardPlus_955BandWidth_ChinaCdn
StandardPlus_AvgBandWidth_ChinaCdn
StandardPlus_AvgBandWidth_ChinaCdn
Standard_Verizon
Standard_Verizon
Premium_Verizon
Premium_Verizon
Custom_Verizon
Custom_Verizon
Standard_Akamai
Standard_Akamai
Standard_ChinaCdn
Standard_ChinaCdn
Standard_Microsoft
Standard_Microsoft
Premium_ChinaCdn
Premium_ChinaCdn
Standard_AzureFrontDoor
Standard_AzureFrontDoor
Premium_AzureFrontDoor
Premium_AzureFrontDoor
Standard_955BandWidth_ChinaCdn
Standard_955BandWidth_ChinaCdn
Standard_AvgBandWidth_ChinaCdn
Standard_AvgBandWidth_ChinaCdn
StandardPlus_ChinaCdn
StandardPlus_ChinaCdn
StandardPlus_955BandWidth_ChinaCdn
StandardPlus_955BandWidth_ChinaCdn
StandardPlus_AvgBandWidth_ChinaCdn
StandardPlus_AvgBandWidth_ChinaCdn
STANDARD_VERIZON
Standard_Verizon
PREMIUM_VERIZON
Premium_Verizon
CUSTOM_VERIZON
Custom_Verizon
STANDARD_AKAMAI
Standard_Akamai
STANDARD_CHINA_CDN
Standard_ChinaCdn
STANDARD_MICROSOFT
Standard_Microsoft
PREMIUM_CHINA_CDN
Premium_ChinaCdn
STANDARD_AZURE_FRONT_DOOR
Standard_AzureFrontDoor
PREMIUM_AZURE_FRONT_DOOR
Premium_AzureFrontDoor
STANDARD_955_BAND_WIDTH_CHINA_CDN
Standard_955BandWidth_ChinaCdn
STANDARD_AVG_BAND_WIDTH_CHINA_CDN
Standard_AvgBandWidth_ChinaCdn
STANDARD_PLUS_CHINA_CDN
StandardPlus_ChinaCdn
STANDARD_PLUS_955_BAND_WIDTH_CHINA_CDN
StandardPlus_955BandWidth_ChinaCdn
STANDARD_PLUS_AVG_BAND_WIDTH_CHINA_CDN
StandardPlus_AvgBandWidth_ChinaCdn
"Standard_Verizon"
Standard_Verizon
"Premium_Verizon"
Premium_Verizon
"Custom_Verizon"
Custom_Verizon
"Standard_Akamai"
Standard_Akamai
"Standard_ChinaCdn"
Standard_ChinaCdn
"Standard_Microsoft"
Standard_Microsoft
"Premium_ChinaCdn"
Premium_ChinaCdn
"Standard_AzureFrontDoor"
Standard_AzureFrontDoor
"Premium_AzureFrontDoor"
Premium_AzureFrontDoor
"Standard_955BandWidth_ChinaCdn"
Standard_955BandWidth_ChinaCdn
"Standard_AvgBandWidth_ChinaCdn"
Standard_AvgBandWidth_ChinaCdn
"StandardPlus_ChinaCdn"
StandardPlus_ChinaCdn
"StandardPlus_955BandWidth_ChinaCdn"
StandardPlus_955BandWidth_ChinaCdn
"StandardPlus_AvgBandWidth_ChinaCdn"
StandardPlus_AvgBandWidth_ChinaCdn

SkuResponse

Name string

Name of the pricing tier.

Name string

Name of the pricing tier.

name String

Name of the pricing tier.

name string

Name of the pricing tier.

name str

Name of the pricing tier.

name String

Name of the pricing tier.

SystemDataResponse

CreatedAt string

The timestamp of resource creation (UTC)

CreatedBy string

An identifier for the identity that created the resource

CreatedByType string

The type of identity that created the resource

LastModifiedAt string

The timestamp of resource last modification (UTC)

LastModifiedBy string

An identifier for the identity that last modified the resource

LastModifiedByType string

The type of identity that last modified the resource

CreatedAt string

The timestamp of resource creation (UTC)

CreatedBy string

An identifier for the identity that created the resource

CreatedByType string

The type of identity that created the resource

LastModifiedAt string

The timestamp of resource last modification (UTC)

LastModifiedBy string

An identifier for the identity that last modified the resource

LastModifiedByType string

The type of identity that last modified the resource

createdAt String

The timestamp of resource creation (UTC)

createdBy String

An identifier for the identity that created the resource

createdByType String

The type of identity that created the resource

lastModifiedAt String

The timestamp of resource last modification (UTC)

lastModifiedBy String

An identifier for the identity that last modified the resource

lastModifiedByType String

The type of identity that last modified the resource

createdAt string

The timestamp of resource creation (UTC)

createdBy string

An identifier for the identity that created the resource

createdByType string

The type of identity that created the resource

lastModifiedAt string

The timestamp of resource last modification (UTC)

lastModifiedBy string

An identifier for the identity that last modified the resource

lastModifiedByType string

The type of identity that last modified the resource

created_at str

The timestamp of resource creation (UTC)

created_by str

An identifier for the identity that created the resource

created_by_type str

The type of identity that created the resource

last_modified_at str

The timestamp of resource last modification (UTC)

last_modified_by str

An identifier for the identity that last modified the resource

last_modified_by_type str

The type of identity that last modified the resource

createdAt String

The timestamp of resource creation (UTC)

createdBy String

An identifier for the identity that created the resource

createdByType String

The type of identity that created the resource

lastModifiedAt String

The timestamp of resource last modification (UTC)

lastModifiedBy String

An identifier for the identity that last modified the resource

lastModifiedByType String

The type of identity that last modified the resource

TransformType

Lowercase
Lowercase
Uppercase
Uppercase
Trim
Trim
UrlDecode
UrlDecode
UrlEncode
UrlEncode
RemoveNulls
RemoveNulls
TransformTypeLowercase
Lowercase
TransformTypeUppercase
Uppercase
TransformTypeTrim
Trim
TransformTypeUrlDecode
UrlDecode
TransformTypeUrlEncode
UrlEncode
TransformTypeRemoveNulls
RemoveNulls
Lowercase
Lowercase
Uppercase
Uppercase
Trim
Trim
UrlDecode
UrlDecode
UrlEncode
UrlEncode
RemoveNulls
RemoveNulls
Lowercase
Lowercase
Uppercase
Uppercase
Trim
Trim
UrlDecode
UrlDecode
UrlEncode
UrlEncode
RemoveNulls
RemoveNulls
LOWERCASE
Lowercase
UPPERCASE
Uppercase
TRIM
Trim
URL_DECODE
UrlDecode
URL_ENCODE
UrlEncode
REMOVE_NULLS
RemoveNulls
"Lowercase"
Lowercase
"Uppercase"
Uppercase
"Trim"
Trim
"UrlDecode"
UrlDecode
"UrlEncode"
UrlEncode
"RemoveNulls"
RemoveNulls

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:cdn:Policy MicrosoftCdnWafPolicy /subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Cdn/CdnWebApplicationFirewallPolicies/MicrosoftCdnWafPolicy

Package Details

Repository
Azure Native pulumi/pulumi-azure-native
License
Apache-2.0