Azure Native v3.3.0, Apr 28 25

This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.

Azure Native v3.3.0 published on Monday, Apr 28, 2025 by Pulumi

pulumi/pulumi-azure-native

azure-native.frontdoor.getPolicy

Explore with Pulumi AI

This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.

Azure Native v3.3.0 published on Monday, Apr 28, 2025 by Pulumi

pulumi/pulumi-azure-native

Using getPolicy

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getPolicy(args: GetPolicyArgs, opts?: InvokeOptions): Promise<GetPolicyResult>
function getPolicyOutput(args: GetPolicyOutputArgs, opts?: InvokeOptions): Output<GetPolicyResult>

def get_policy(policy_name: Optional[str] = None,
               resource_group_name: Optional[str] = None,
               opts: Optional[InvokeOptions] = None) -> GetPolicyResult
def get_policy_output(policy_name: Optional[pulumi.Input[str]] = None,
               resource_group_name: Optional[pulumi.Input[str]] = None,
               opts: Optional[InvokeOptions] = None) -> Output[GetPolicyResult]

func LookupPolicy(ctx *Context, args *LookupPolicyArgs, opts ...InvokeOption) (*LookupPolicyResult, error)
func LookupPolicyOutput(ctx *Context, args *LookupPolicyOutputArgs, opts ...InvokeOption) LookupPolicyResultOutput

> Note: This function is named LookupPolicy in the Go SDK.

public static class GetPolicy 
{
    public static Task<GetPolicyResult> InvokeAsync(GetPolicyArgs args, InvokeOptions? opts = null)
    public static Output<GetPolicyResult> Invoke(GetPolicyInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetPolicyResult> getPolicy(GetPolicyArgs args, InvokeOptions options)
public static Output<GetPolicyResult> getPolicy(GetPolicyArgs args, InvokeOptions options)

fn::invoke:
  function: azure-native:frontdoor:getPolicy
  arguments:
    # arguments dictionary

The following arguments are supported:

PolicyName string: The name of the Web Application Firewall Policy.
ResourceGroupName string: Name of the Resource group within the Azure subscription.

PolicyName string: The name of the Web Application Firewall Policy.
ResourceGroupName string: Name of the Resource group within the Azure subscription.

policyName String: The name of the Web Application Firewall Policy.
resourceGroupName String: Name of the Resource group within the Azure subscription.

policyName string: The name of the Web Application Firewall Policy.
resourceGroupName string: Name of the Resource group within the Azure subscription.

policy_name str: The name of the Web Application Firewall Policy.
resource_group_name str: Name of the Resource group within the Azure subscription.

policyName String: The name of the Web Application Firewall Policy.
resourceGroupName String: Name of the Resource group within the Azure subscription.

getPolicy Result

The following output properties are available:

AzureApiVersion string: The Azure API version of the resource.
FrontendEndpointLinks List<Pulumi.AzureNative.FrontDoor.Outputs.FrontendEndpointLinkResponse>: Describes Frontend Endpoints associated with this Web Application Firewall policy.
Id string: Resource ID.
Name string: Resource name.
ProvisioningState string: Provisioning state of the policy.
ResourceState string
RoutingRuleLinks List<Pulumi.AzureNative.FrontDoor.Outputs.RoutingRuleLinkResponse>: Describes Routing Rules associated with this Web Application Firewall policy.
SecurityPolicyLinks List<Pulumi.AzureNative.FrontDoor.Outputs.SecurityPolicyLinkResponse>: Describes Security Policy associated with this Web Application Firewall policy.
Type string: Resource type.
CustomRules Pulumi.AzureNative.FrontDoor.Outputs.CustomRuleListResponse: Describes custom rules inside the policy.
Etag string: Gets a unique read-only string that changes whenever the resource is updated.
Location string: Resource location.
ManagedRules Pulumi.AzureNative.FrontDoor.Outputs.ManagedRuleSetListResponse: Describes managed rules inside the policy.
PolicySettings Pulumi.AzureNative.FrontDoor.Outputs.PolicySettingsResponse: Describes settings for the policy.
Sku Pulumi.AzureNative.FrontDoor.Outputs.SkuResponse: The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
Tags Dictionary<string, string>: Resource tags.

AzureApiVersion string: The Azure API version of the resource.
FrontendEndpointLinks []FrontendEndpointLinkResponse: Describes Frontend Endpoints associated with this Web Application Firewall policy.
Id string: Resource ID.
Name string: Resource name.
ProvisioningState string: Provisioning state of the policy.
ResourceState string
RoutingRuleLinks []RoutingRuleLinkResponse: Describes Routing Rules associated with this Web Application Firewall policy.
SecurityPolicyLinks []SecurityPolicyLinkResponse: Describes Security Policy associated with this Web Application Firewall policy.
Type string: Resource type.
CustomRules CustomRuleListResponse: Describes custom rules inside the policy.
Etag string: Gets a unique read-only string that changes whenever the resource is updated.
Location string: Resource location.
ManagedRules ManagedRuleSetListResponse: Describes managed rules inside the policy.
PolicySettings PolicySettingsResponse: Describes settings for the policy.
Sku SkuResponse: The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
Tags map[string]string: Resource tags.

azureApiVersion String: The Azure API version of the resource.
frontendEndpointLinks List<FrontendEndpointLinkResponse>: Describes Frontend Endpoints associated with this Web Application Firewall policy.
id String: Resource ID.
name String: Resource name.
provisioningState String: Provisioning state of the policy.
resourceState String
routingRuleLinks List<RoutingRuleLinkResponse>: Describes Routing Rules associated with this Web Application Firewall policy.
securityPolicyLinks List<SecurityPolicyLinkResponse>: Describes Security Policy associated with this Web Application Firewall policy.
type String: Resource type.
customRules CustomRuleListResponse: Describes custom rules inside the policy.
etag String: Gets a unique read-only string that changes whenever the resource is updated.
location String: Resource location.
managedRules ManagedRuleSetListResponse: Describes managed rules inside the policy.
policySettings PolicySettingsResponse: Describes settings for the policy.
sku SkuResponse: The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
tags Map<String,String>: Resource tags.

azureApiVersion string: The Azure API version of the resource.
frontendEndpointLinks FrontendEndpointLinkResponse[]: Describes Frontend Endpoints associated with this Web Application Firewall policy.
id string: Resource ID.
name string: Resource name.
provisioningState string: Provisioning state of the policy.
resourceState string
routingRuleLinks RoutingRuleLinkResponse[]: Describes Routing Rules associated with this Web Application Firewall policy.
securityPolicyLinks SecurityPolicyLinkResponse[]: Describes Security Policy associated with this Web Application Firewall policy.
type string: Resource type.
customRules CustomRuleListResponse: Describes custom rules inside the policy.
etag string: Gets a unique read-only string that changes whenever the resource is updated.
location string: Resource location.
managedRules ManagedRuleSetListResponse: Describes managed rules inside the policy.
policySettings PolicySettingsResponse: Describes settings for the policy.
sku SkuResponse: The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
tags {[key: string]: string}: Resource tags.

azure_api_version str: The Azure API version of the resource.
frontend_endpoint_links Sequence[FrontendEndpointLinkResponse]: Describes Frontend Endpoints associated with this Web Application Firewall policy.
id str: Resource ID.
name str: Resource name.
provisioning_state str: Provisioning state of the policy.
resource_state str
routing_rule_links Sequence[RoutingRuleLinkResponse]: Describes Routing Rules associated with this Web Application Firewall policy.
security_policy_links Sequence[SecurityPolicyLinkResponse]: Describes Security Policy associated with this Web Application Firewall policy.
type str: Resource type.
custom_rules CustomRuleListResponse: Describes custom rules inside the policy.
etag str: Gets a unique read-only string that changes whenever the resource is updated.
location str: Resource location.
managed_rules ManagedRuleSetListResponse: Describes managed rules inside the policy.
policy_settings PolicySettingsResponse: Describes settings for the policy.
sku SkuResponse: The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
tags Mapping[str, str]: Resource tags.

azureApiVersion String: The Azure API version of the resource.
frontendEndpointLinks List<Property Map>: Describes Frontend Endpoints associated with this Web Application Firewall policy.
id String: Resource ID.
name String: Resource name.
provisioningState String: Provisioning state of the policy.
resourceState String
routingRuleLinks List<Property Map>: Describes Routing Rules associated with this Web Application Firewall policy.
securityPolicyLinks List<Property Map>: Describes Security Policy associated with this Web Application Firewall policy.
type String: Resource type.
customRules Property Map: Describes custom rules inside the policy.
etag String: Gets a unique read-only string that changes whenever the resource is updated.
location String: Resource location.
managedRules Property Map: Describes managed rules inside the policy.
policySettings Property Map: Describes settings for the policy.
sku Property Map: The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
tags Map<String>: Resource tags.

Supporting Types

CustomRuleListResponse

Rules List<Pulumi.AzureNative.FrontDoor.Inputs.CustomRuleResponse>: List of rules

Rules []CustomRuleResponse: List of rules

rules List<CustomRuleResponse>: List of rules

rules CustomRuleResponse[]: List of rules

rules Sequence[CustomRuleResponse]: List of rules

rules List<Property Map>: List of rules

CustomRuleResponse

Action string: Describes what action to be applied when rule matches.
MatchConditions List<Pulumi.AzureNative.FrontDoor.Inputs.MatchConditionResponse>: List of match conditions.
Priority int: Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
RuleType string: Describes type of rule.
EnabledState string: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
GroupBy List<Pulumi.AzureNative.FrontDoor.Inputs.GroupByVariableResponse>: Describes the list of variables to group the rate limit requests
Name string: Describes the name of the rule.
RateLimitDurationInMinutes int: Time window for resetting the rate limit count. Default is 1 minute.
RateLimitThreshold int: Number of allowed requests per client within the time window.

Action string: Describes what action to be applied when rule matches.
MatchConditions []MatchConditionResponse: List of match conditions.
Priority int: Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
RuleType string: Describes type of rule.
EnabledState string: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
GroupBy []GroupByVariableResponse: Describes the list of variables to group the rate limit requests
Name string: Describes the name of the rule.
RateLimitDurationInMinutes int: Time window for resetting the rate limit count. Default is 1 minute.
RateLimitThreshold int: Number of allowed requests per client within the time window.

action String: Describes what action to be applied when rule matches.
matchConditions List<MatchConditionResponse>: List of match conditions.
priority Integer: Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
ruleType String: Describes type of rule.
enabledState String: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
groupBy List<GroupByVariableResponse>: Describes the list of variables to group the rate limit requests
name String: Describes the name of the rule.
rateLimitDurationInMinutes Integer: Time window for resetting the rate limit count. Default is 1 minute.
rateLimitThreshold Integer: Number of allowed requests per client within the time window.

action string: Describes what action to be applied when rule matches.
matchConditions MatchConditionResponse[]: List of match conditions.
priority number: Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
ruleType string: Describes type of rule.
enabledState string: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
groupBy GroupByVariableResponse[]: Describes the list of variables to group the rate limit requests
name string: Describes the name of the rule.
rateLimitDurationInMinutes number: Time window for resetting the rate limit count. Default is 1 minute.
rateLimitThreshold number: Number of allowed requests per client within the time window.

action str: Describes what action to be applied when rule matches.
match_conditions Sequence[MatchConditionResponse]: List of match conditions.
priority int: Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
rule_type str: Describes type of rule.
enabled_state str: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
group_by Sequence[GroupByVariableResponse]: Describes the list of variables to group the rate limit requests
name str: Describes the name of the rule.
rate_limit_duration_in_minutes int: Time window for resetting the rate limit count. Default is 1 minute.
rate_limit_threshold int: Number of allowed requests per client within the time window.

action String: Describes what action to be applied when rule matches.
matchConditions List<Property Map>: List of match conditions.
priority Number: Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
ruleType String: Describes type of rule.
enabledState String: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
groupBy List<Property Map>: Describes the list of variables to group the rate limit requests
name String: Describes the name of the rule.
rateLimitDurationInMinutes Number: Time window for resetting the rate limit count. Default is 1 minute.
rateLimitThreshold Number: Number of allowed requests per client within the time window.

FrontendEndpointLinkResponse

Id string: Resource ID.

Id string: Resource ID.

id String: Resource ID.

id string: Resource ID.

id str: Resource ID.

id String: Resource ID.

GroupByVariableResponse

VariableName string: Describes the supported variable for group by

VariableName string: Describes the supported variable for group by

variableName String: Describes the supported variable for group by

variableName string: Describes the supported variable for group by

variable_name str: Describes the supported variable for group by

variableName String: Describes the supported variable for group by

ManagedRuleExclusionResponse

MatchVariable string: The variable type to be excluded.
Selector string: Selector value for which elements in the collection this exclusion applies to.
SelectorMatchOperator string: Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

MatchVariable string: The variable type to be excluded.
Selector string: Selector value for which elements in the collection this exclusion applies to.
SelectorMatchOperator string: Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

matchVariable String: The variable type to be excluded.
selector String: Selector value for which elements in the collection this exclusion applies to.
selectorMatchOperator String: Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

matchVariable string: The variable type to be excluded.
selector string: Selector value for which elements in the collection this exclusion applies to.
selectorMatchOperator string: Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

match_variable str: The variable type to be excluded.
selector str: Selector value for which elements in the collection this exclusion applies to.
selector_match_operator str: Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

matchVariable String: The variable type to be excluded.
selector String: Selector value for which elements in the collection this exclusion applies to.
selectorMatchOperator String: Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

ManagedRuleGroupOverrideResponse

RuleGroupName string: Describes the managed rule group to override.
Exclusions List<Pulumi.AzureNative.FrontDoor.Inputs.ManagedRuleExclusionResponse>: Describes the exclusions that are applied to all rules in the group.
Rules List<Pulumi.AzureNative.FrontDoor.Inputs.ManagedRuleOverrideResponse>: List of rules that will be disabled. If none specified, all rules in the group will be disabled.

RuleGroupName string: Describes the managed rule group to override.
Exclusions []ManagedRuleExclusionResponse: Describes the exclusions that are applied to all rules in the group.
Rules []ManagedRuleOverrideResponse: List of rules that will be disabled. If none specified, all rules in the group will be disabled.

ruleGroupName String: Describes the managed rule group to override.
exclusions List<ManagedRuleExclusionResponse>: Describes the exclusions that are applied to all rules in the group.
rules List<ManagedRuleOverrideResponse>: List of rules that will be disabled. If none specified, all rules in the group will be disabled.

ruleGroupName string: Describes the managed rule group to override.
exclusions ManagedRuleExclusionResponse[]: Describes the exclusions that are applied to all rules in the group.
rules ManagedRuleOverrideResponse[]: List of rules that will be disabled. If none specified, all rules in the group will be disabled.

rule_group_name str: Describes the managed rule group to override.
exclusions Sequence[ManagedRuleExclusionResponse]: Describes the exclusions that are applied to all rules in the group.
rules Sequence[ManagedRuleOverrideResponse]: List of rules that will be disabled. If none specified, all rules in the group will be disabled.

ruleGroupName String: Describes the managed rule group to override.
exclusions List<Property Map>: Describes the exclusions that are applied to all rules in the group.
rules List<Property Map>: List of rules that will be disabled. If none specified, all rules in the group will be disabled.

ManagedRuleOverrideResponse

RuleId string: Identifier for the managed rule.
Action string: Describes the override action to be applied when rule matches.
EnabledState string: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
Exclusions List<Pulumi.AzureNative.FrontDoor.Inputs.ManagedRuleExclusionResponse>: Describes the exclusions that are applied to this specific rule.

RuleId string: Identifier for the managed rule.
Action string: Describes the override action to be applied when rule matches.
EnabledState string: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
Exclusions []ManagedRuleExclusionResponse: Describes the exclusions that are applied to this specific rule.

ruleId String: Identifier for the managed rule.
action String: Describes the override action to be applied when rule matches.
enabledState String: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
exclusions List<ManagedRuleExclusionResponse>: Describes the exclusions that are applied to this specific rule.

ruleId string: Identifier for the managed rule.
action string: Describes the override action to be applied when rule matches.
enabledState string: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
exclusions ManagedRuleExclusionResponse[]: Describes the exclusions that are applied to this specific rule.

rule_id str: Identifier for the managed rule.
action str: Describes the override action to be applied when rule matches.
enabled_state str: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
exclusions Sequence[ManagedRuleExclusionResponse]: Describes the exclusions that are applied to this specific rule.

ruleId String: Identifier for the managed rule.
action String: Describes the override action to be applied when rule matches.
enabledState String: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
exclusions List<Property Map>: Describes the exclusions that are applied to this specific rule.

ManagedRuleSetListResponse

ManagedRuleSets List<Pulumi.AzureNative.FrontDoor.Inputs.ManagedRuleSetResponse>: List of rule sets.

ManagedRuleSets []ManagedRuleSetResponse: List of rule sets.

managedRuleSets List<ManagedRuleSetResponse>: List of rule sets.

managedRuleSets ManagedRuleSetResponse[]: List of rule sets.

managed_rule_sets Sequence[ManagedRuleSetResponse]: List of rule sets.

managedRuleSets List<Property Map>: List of rule sets.

ManagedRuleSetResponse

RuleSetType string: Defines the rule set type to use.
RuleSetVersion string: Defines the version of the rule set to use.
Exclusions List<Pulumi.AzureNative.FrontDoor.Inputs.ManagedRuleExclusionResponse>: Describes the exclusions that are applied to all rules in the set.
RuleGroupOverrides List<Pulumi.AzureNative.FrontDoor.Inputs.ManagedRuleGroupOverrideResponse>: Defines the rule group overrides to apply to the rule set.
RuleSetAction string: Defines the rule set action.

RuleSetType string: Defines the rule set type to use.
RuleSetVersion string: Defines the version of the rule set to use.
Exclusions []ManagedRuleExclusionResponse: Describes the exclusions that are applied to all rules in the set.
RuleGroupOverrides []ManagedRuleGroupOverrideResponse: Defines the rule group overrides to apply to the rule set.
RuleSetAction string: Defines the rule set action.

ruleSetType String: Defines the rule set type to use.
ruleSetVersion String: Defines the version of the rule set to use.
exclusions List<ManagedRuleExclusionResponse>: Describes the exclusions that are applied to all rules in the set.
ruleGroupOverrides List<ManagedRuleGroupOverrideResponse>: Defines the rule group overrides to apply to the rule set.
ruleSetAction String: Defines the rule set action.

ruleSetType string: Defines the rule set type to use.
ruleSetVersion string: Defines the version of the rule set to use.
exclusions ManagedRuleExclusionResponse[]: Describes the exclusions that are applied to all rules in the set.
ruleGroupOverrides ManagedRuleGroupOverrideResponse[]: Defines the rule group overrides to apply to the rule set.
ruleSetAction string: Defines the rule set action.

rule_set_type str: Defines the rule set type to use.
rule_set_version str: Defines the version of the rule set to use.
exclusions Sequence[ManagedRuleExclusionResponse]: Describes the exclusions that are applied to all rules in the set.
rule_group_overrides Sequence[ManagedRuleGroupOverrideResponse]: Defines the rule group overrides to apply to the rule set.
rule_set_action str: Defines the rule set action.

ruleSetType String: Defines the rule set type to use.
ruleSetVersion String: Defines the version of the rule set to use.
exclusions List<Property Map>: Describes the exclusions that are applied to all rules in the set.
ruleGroupOverrides List<Property Map>: Defines the rule group overrides to apply to the rule set.
ruleSetAction String: Defines the rule set action.

MatchConditionResponse

MatchValue List<string>: List of possible match values.
MatchVariable string: Request variable to compare with.
Operator string: Comparison type to use for matching with the variable value.
NegateCondition bool: Describes if the result of this condition should be negated.
Selector string: Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
Transforms List<string>: List of transforms.

MatchValue []string: List of possible match values.
MatchVariable string: Request variable to compare with.
Operator string: Comparison type to use for matching with the variable value.
NegateCondition bool: Describes if the result of this condition should be negated.
Selector string: Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
Transforms []string: List of transforms.

matchValue List<String>: List of possible match values.
matchVariable String: Request variable to compare with.
operator String: Comparison type to use for matching with the variable value.
negateCondition Boolean: Describes if the result of this condition should be negated.
selector String: Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
transforms List<String>: List of transforms.

matchValue string[]: List of possible match values.
matchVariable string: Request variable to compare with.
operator string: Comparison type to use for matching with the variable value.
negateCondition boolean: Describes if the result of this condition should be negated.
selector string: Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
transforms string[]: List of transforms.

match_value Sequence[str]: List of possible match values.
match_variable str: Request variable to compare with.
operator str: Comparison type to use for matching with the variable value.
negate_condition bool: Describes if the result of this condition should be negated.
selector str: Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
transforms Sequence[str]: List of transforms.

matchValue List<String>: List of possible match values.
matchVariable String: Request variable to compare with.
operator String: Comparison type to use for matching with the variable value.
negateCondition Boolean: Describes if the result of this condition should be negated.
selector String: Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
transforms List<String>: List of transforms.

PolicySettingsResponse

CustomBlockResponseBody string: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
CustomBlockResponseStatusCode int: If the action type is block, customer can override the response status code.
EnabledState string: Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
JavascriptChallengeExpirationInMinutes int: Defines the JavaScript challenge cookie validity lifetime in minutes. This setting is only applicable to Premium_AzureFrontDoor. Value must be an integer between 5 and 1440 with the default value being 30.
Mode string: Describes if it is in detection mode or prevention mode at policy level.
RedirectUrl string: If action type is redirect, this field represents redirect URL for the client.
RequestBodyCheck string: Describes if policy managed rules will inspect the request body content.
ScrubbingRules List<Pulumi.AzureNative.FrontDoor.Inputs.WebApplicationFirewallScrubbingRulesResponse>: List of log scrubbing rules applied to the Web Application Firewall logs.
State string: State of the log scrubbing config. Default value is Enabled.

CustomBlockResponseBody string: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
CustomBlockResponseStatusCode int: If the action type is block, customer can override the response status code.
EnabledState string: Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
JavascriptChallengeExpirationInMinutes int: Defines the JavaScript challenge cookie validity lifetime in minutes. This setting is only applicable to Premium_AzureFrontDoor. Value must be an integer between 5 and 1440 with the default value being 30.
Mode string: Describes if it is in detection mode or prevention mode at policy level.
RedirectUrl string: If action type is redirect, this field represents redirect URL for the client.
RequestBodyCheck string: Describes if policy managed rules will inspect the request body content.
ScrubbingRules []WebApplicationFirewallScrubbingRulesResponse: List of log scrubbing rules applied to the Web Application Firewall logs.
State string: State of the log scrubbing config. Default value is Enabled.

customBlockResponseBody String: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
customBlockResponseStatusCode Integer: If the action type is block, customer can override the response status code.
enabledState String: Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
javascriptChallengeExpirationInMinutes Integer: Defines the JavaScript challenge cookie validity lifetime in minutes. This setting is only applicable to Premium_AzureFrontDoor. Value must be an integer between 5 and 1440 with the default value being 30.
mode String: Describes if it is in detection mode or prevention mode at policy level.
redirectUrl String: If action type is redirect, this field represents redirect URL for the client.
requestBodyCheck String: Describes if policy managed rules will inspect the request body content.
scrubbingRules List<WebApplicationFirewallScrubbingRulesResponse>: List of log scrubbing rules applied to the Web Application Firewall logs.
state String: State of the log scrubbing config. Default value is Enabled.

customBlockResponseBody string: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
customBlockResponseStatusCode number: If the action type is block, customer can override the response status code.
enabledState string: Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
javascriptChallengeExpirationInMinutes number: Defines the JavaScript challenge cookie validity lifetime in minutes. This setting is only applicable to Premium_AzureFrontDoor. Value must be an integer between 5 and 1440 with the default value being 30.
mode string: Describes if it is in detection mode or prevention mode at policy level.
redirectUrl string: If action type is redirect, this field represents redirect URL for the client.
requestBodyCheck string: Describes if policy managed rules will inspect the request body content.
scrubbingRules WebApplicationFirewallScrubbingRulesResponse[]: List of log scrubbing rules applied to the Web Application Firewall logs.
state string: State of the log scrubbing config. Default value is Enabled.

custom_block_response_body str: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
custom_block_response_status_code int: If the action type is block, customer can override the response status code.
enabled_state str: Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
javascript_challenge_expiration_in_minutes int: Defines the JavaScript challenge cookie validity lifetime in minutes. This setting is only applicable to Premium_AzureFrontDoor. Value must be an integer between 5 and 1440 with the default value being 30.
mode str: Describes if it is in detection mode or prevention mode at policy level.
redirect_url str: If action type is redirect, this field represents redirect URL for the client.
request_body_check str: Describes if policy managed rules will inspect the request body content.
scrubbing_rules Sequence[WebApplicationFirewallScrubbingRulesResponse]: List of log scrubbing rules applied to the Web Application Firewall logs.
state str: State of the log scrubbing config. Default value is Enabled.

customBlockResponseBody String: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
customBlockResponseStatusCode Number: If the action type is block, customer can override the response status code.
enabledState String: Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
javascriptChallengeExpirationInMinutes Number: Defines the JavaScript challenge cookie validity lifetime in minutes. This setting is only applicable to Premium_AzureFrontDoor. Value must be an integer between 5 and 1440 with the default value being 30.
mode String: Describes if it is in detection mode or prevention mode at policy level.
redirectUrl String: If action type is redirect, this field represents redirect URL for the client.
requestBodyCheck String: Describes if policy managed rules will inspect the request body content.
scrubbingRules List<Property Map>: List of log scrubbing rules applied to the Web Application Firewall logs.
state String: State of the log scrubbing config. Default value is Enabled.

RoutingRuleLinkResponse

Id string: Resource ID.

Id string: Resource ID.

id String: Resource ID.

id string: Resource ID.

id str: Resource ID.

id String: Resource ID.

SecurityPolicyLinkResponse

Id string: Resource ID.

Id string: Resource ID.

id String: Resource ID.

id string: Resource ID.

id str: Resource ID.

id String: Resource ID.

SkuResponse

Name string: Name of the pricing tier.

Name string: Name of the pricing tier.

name String: Name of the pricing tier.

name string: Name of the pricing tier.

name str: Name of the pricing tier.

name String: Name of the pricing tier.

WebApplicationFirewallScrubbingRulesResponse

MatchVariable string: The variable to be scrubbed from the logs.
SelectorMatchOperator string: When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.
Selector string: When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
State string: Defines the state of a log scrubbing rule. Default value is enabled.

MatchVariable string: The variable to be scrubbed from the logs.
SelectorMatchOperator string: When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.
Selector string: When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
State string: Defines the state of a log scrubbing rule. Default value is enabled.

matchVariable String: The variable to be scrubbed from the logs.
selectorMatchOperator String: When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.
selector String: When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
state String: Defines the state of a log scrubbing rule. Default value is enabled.

matchVariable string: The variable to be scrubbed from the logs.
selectorMatchOperator string: When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.
selector string: When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
state string: Defines the state of a log scrubbing rule. Default value is enabled.

match_variable str: The variable to be scrubbed from the logs.
selector_match_operator str: When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.
selector str: When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
state str: Defines the state of a log scrubbing rule. Default value is enabled.

matchVariable String: The variable to be scrubbed from the logs.
selectorMatchOperator String: When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.
selector String: When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
state String: Defines the state of a log scrubbing rule. Default value is enabled.

Package Details

Repository: Azure Native pulumi/pulumi-azure-native
License: Apache-2.0

This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.

Azure Native v3.3.0 published on Monday, Apr 28, 2025 by Pulumi

pulumi/pulumi-azure-native

azure-native.frontdoor.getPolicy

On this page

On this page

Using getPolicy

getPolicy Result

Supporting Types

CustomRuleListResponse

CustomRuleResponse

FrontendEndpointLinkResponse

GroupByVariableResponse

ManagedRuleExclusionResponse

ManagedRuleGroupOverrideResponse

ManagedRuleOverrideResponse

ManagedRuleSetListResponse

ManagedRuleSetResponse

MatchConditionResponse

PolicySettingsResponse

RoutingRuleLinkResponse

SecurityPolicyLinkResponse

SkuResponse

WebApplicationFirewallScrubbingRulesResponse

Package Details

On this page

On this page