Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native
  3. API Docs
  4. frontdoor
  5. Policy
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.3.0 published on Monday, Apr 28, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native.frontdoor.Policy

Explore with Pulumi AI

azure-native logo
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.3.0 published on Monday, Apr 28, 2025 by Pulumi
pulumi/pulumi-azure-native

    Defines web application firewall policy.

    Uses Azure REST API version 2024-02-01.

    Other available API versions: 2019-03-01, 2019-10-01, 2020-04-01, 2020-11-01, 2021-06-01, 2022-05-01, 2025-03-01. These can be accessed by generating a local SDK package using the CLI command pulumi package add azure-native frontdoor [ApiVersion]. See the version guide for details.

    Example Usage

    Creates specific policy

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var policy = new AzureNative.FrontDoor.Policy("policy", new()
    {
        CustomRules = new AzureNative.FrontDoor.Inputs.CustomRuleListArgs
        {
            Rules = new[]
            {
                new AzureNative.FrontDoor.Inputs.CustomRuleArgs
                {
                    Action = AzureNative.FrontDoor.ActionType.Block,
                    MatchConditions = new[]
                    {
                        new AzureNative.FrontDoor.Inputs.MatchConditionArgs
                        {
                            MatchValue = new[]
                            {
                                "192.168.1.0/24",
                                "10.0.0.0/24",
                            },
                            MatchVariable = AzureNative.FrontDoor.MatchVariable.RemoteAddr,
                            Operator = AzureNative.FrontDoor.Operator.IPMatch,
                        },
                    },
                    Name = "Rule1",
                    Priority = 1,
                    RateLimitThreshold = 1000,
                    RuleType = AzureNative.FrontDoor.RuleType.RateLimitRule,
                },
                new AzureNative.FrontDoor.Inputs.CustomRuleArgs
                {
                    Action = AzureNative.FrontDoor.ActionType.Block,
                    MatchConditions = new[]
                    {
                        new AzureNative.FrontDoor.Inputs.MatchConditionArgs
                        {
                            MatchValue = new[]
                            {
                                "CH",
                            },
                            MatchVariable = AzureNative.FrontDoor.MatchVariable.RemoteAddr,
                            Operator = AzureNative.FrontDoor.Operator.GeoMatch,
                        },
                        new AzureNative.FrontDoor.Inputs.MatchConditionArgs
                        {
                            MatchValue = new[]
                            {
                                "windows",
                            },
                            MatchVariable = AzureNative.FrontDoor.MatchVariable.RequestHeader,
                            Operator = AzureNative.FrontDoor.Operator.Contains,
                            Selector = "UserAgent",
                            Transforms = new[]
                            {
                                AzureNative.FrontDoor.TransformType.Lowercase,
                            },
                        },
                    },
                    Name = "Rule2",
                    Priority = 2,
                    RuleType = AzureNative.FrontDoor.RuleType.MatchRule,
                },
            },
        },
        Location = "WestUs",
        ManagedRules = new AzureNative.FrontDoor.Inputs.ManagedRuleSetListArgs
        {
            ManagedRuleSets = new[]
            {
                new AzureNative.FrontDoor.Inputs.ManagedRuleSetArgs
                {
                    Exclusions = new[]
                    {
                        new AzureNative.FrontDoor.Inputs.ManagedRuleExclusionArgs
                        {
                            MatchVariable = AzureNative.FrontDoor.ManagedRuleExclusionMatchVariable.RequestHeaderNames,
                            Selector = "User-Agent",
                            SelectorMatchOperator = AzureNative.FrontDoor.ManagedRuleExclusionSelectorMatchOperator.EqualsValue,
                        },
                    },
                    RuleGroupOverrides = new[]
                    {
                        new AzureNative.FrontDoor.Inputs.ManagedRuleGroupOverrideArgs
                        {
                            Exclusions = new[]
                            {
                                new AzureNative.FrontDoor.Inputs.ManagedRuleExclusionArgs
                                {
                                    MatchVariable = AzureNative.FrontDoor.ManagedRuleExclusionMatchVariable.RequestCookieNames,
                                    Selector = "token",
                                    SelectorMatchOperator = AzureNative.FrontDoor.ManagedRuleExclusionSelectorMatchOperator.StartsWith,
                                },
                            },
                            RuleGroupName = "SQLI",
                            Rules = new[]
                            {
                                new AzureNative.FrontDoor.Inputs.ManagedRuleOverrideArgs
                                {
                                    Action = AzureNative.FrontDoor.ActionType.Redirect,
                                    EnabledState = AzureNative.FrontDoor.ManagedRuleEnabledState.Enabled,
                                    Exclusions = new[]
                                    {
                                        new AzureNative.FrontDoor.Inputs.ManagedRuleExclusionArgs
                                        {
                                            MatchVariable = AzureNative.FrontDoor.ManagedRuleExclusionMatchVariable.QueryStringArgNames,
                                            Selector = "query",
                                            SelectorMatchOperator = AzureNative.FrontDoor.ManagedRuleExclusionSelectorMatchOperator.EqualsValue,
                                        },
                                    },
                                    RuleId = "942100",
                                },
                                new AzureNative.FrontDoor.Inputs.ManagedRuleOverrideArgs
                                {
                                    EnabledState = AzureNative.FrontDoor.ManagedRuleEnabledState.Disabled,
                                    RuleId = "942110",
                                },
                            },
                        },
                    },
                    RuleSetAction = AzureNative.FrontDoor.ManagedRuleSetActionType.Block,
                    RuleSetType = "DefaultRuleSet",
                    RuleSetVersion = "1.0",
                },
            },
        },
        PolicyName = "Policy1",
        PolicySettings = new AzureNative.FrontDoor.Inputs.PolicySettingsArgs
        {
            CustomBlockResponseBody = "PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==",
            CustomBlockResponseStatusCode = 429,
            EnabledState = AzureNative.FrontDoor.PolicyEnabledState.Enabled,
            JavascriptChallengeExpirationInMinutes = 30,
            Mode = AzureNative.FrontDoor.PolicyMode.Prevention,
            RedirectUrl = "http://www.bing.com",
            RequestBodyCheck = AzureNative.FrontDoor.PolicyRequestBodyCheck.Disabled,
            ScrubbingRules = new[]
            {
                new AzureNative.FrontDoor.Inputs.WebApplicationFirewallScrubbingRulesArgs
                {
                    MatchVariable = AzureNative.FrontDoor.ScrubbingRuleEntryMatchVariable.RequestIPAddress,
                    SelectorMatchOperator = AzureNative.FrontDoor.ScrubbingRuleEntryMatchOperator.EqualsAny,
                    State = AzureNative.FrontDoor.ScrubbingRuleEntryState.Enabled,
                },
            },
            State = AzureNative.FrontDoor.WebApplicationFirewallScrubbingState.Enabled,
        },
        ResourceGroupName = "rg1",
        Sku = new AzureNative.FrontDoor.Inputs.SkuArgs
        {
            Name = AzureNative.FrontDoor.SkuName.Premium_AzureFrontDoor,
        },
    });

});

    package main

import (
	frontdoor "github.com/pulumi/pulumi-azure-native-sdk/frontdoor/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := frontdoor.NewPolicy(ctx, "policy", &frontdoor.PolicyArgs{
			CustomRules: &frontdoor.CustomRuleListArgs{
				Rules: frontdoor.CustomRuleArray{
					&frontdoor.CustomRuleArgs{
						Action: pulumi.String(frontdoor.ActionTypeBlock),
						MatchConditions: frontdoor.MatchConditionArray{
							&frontdoor.MatchConditionArgs{
								MatchValue: pulumi.StringArray{
									pulumi.String("192.168.1.0/24"),
									pulumi.String("10.0.0.0/24"),
								},
								MatchVariable: pulumi.String(frontdoor.MatchVariableRemoteAddr),
								Operator:      pulumi.String(frontdoor.OperatorIPMatch),
							},
						},
						Name:               pulumi.String("Rule1"),
						Priority:           pulumi.Int(1),
						RateLimitThreshold: pulumi.Int(1000),
						RuleType:           pulumi.String(frontdoor.RuleTypeRateLimitRule),
					},
					&frontdoor.CustomRuleArgs{
						Action: pulumi.String(frontdoor.ActionTypeBlock),
						MatchConditions: frontdoor.MatchConditionArray{
							&frontdoor.MatchConditionArgs{
								MatchValue: pulumi.StringArray{
									pulumi.String("CH"),
								},
								MatchVariable: pulumi.String(frontdoor.MatchVariableRemoteAddr),
								Operator:      pulumi.String(frontdoor.OperatorGeoMatch),
							},
							&frontdoor.MatchConditionArgs{
								MatchValue: pulumi.StringArray{
									pulumi.String("windows"),
								},
								MatchVariable: pulumi.String(frontdoor.MatchVariableRequestHeader),
								Operator:      pulumi.String(frontdoor.OperatorContains),
								Selector:      pulumi.String("UserAgent"),
								Transforms: pulumi.StringArray{
									pulumi.String(frontdoor.TransformTypeLowercase),
								},
							},
						},
						Name:     pulumi.String("Rule2"),
						Priority: pulumi.Int(2),
						RuleType: pulumi.String(frontdoor.RuleTypeMatchRule),
					},
				},
			},
			Location: pulumi.String("WestUs"),
			ManagedRules: &frontdoor.ManagedRuleSetListArgs{
				ManagedRuleSets: frontdoor.ManagedRuleSetArray{
					&frontdoor.ManagedRuleSetArgs{
						Exclusions: frontdoor.ManagedRuleExclusionArray{
							&frontdoor.ManagedRuleExclusionArgs{
								MatchVariable:         pulumi.String(frontdoor.ManagedRuleExclusionMatchVariableRequestHeaderNames),
								Selector:              pulumi.String("User-Agent"),
								SelectorMatchOperator: pulumi.String(frontdoor.ManagedRuleExclusionSelectorMatchOperatorEquals),
							},
						},
						RuleGroupOverrides: frontdoor.ManagedRuleGroupOverrideArray{
							&frontdoor.ManagedRuleGroupOverrideArgs{
								Exclusions: frontdoor.ManagedRuleExclusionArray{
									&frontdoor.ManagedRuleExclusionArgs{
										MatchVariable:         pulumi.String(frontdoor.ManagedRuleExclusionMatchVariableRequestCookieNames),
										Selector:              pulumi.String("token"),
										SelectorMatchOperator: pulumi.String(frontdoor.ManagedRuleExclusionSelectorMatchOperatorStartsWith),
									},
								},
								RuleGroupName: pulumi.String("SQLI"),
								Rules: frontdoor.ManagedRuleOverrideArray{
									&frontdoor.ManagedRuleOverrideArgs{
										Action:       pulumi.String(frontdoor.ActionTypeRedirect),
										EnabledState: pulumi.String(frontdoor.ManagedRuleEnabledStateEnabled),
										Exclusions: frontdoor.ManagedRuleExclusionArray{
											&frontdoor.ManagedRuleExclusionArgs{
												MatchVariable:         pulumi.String(frontdoor.ManagedRuleExclusionMatchVariableQueryStringArgNames),
												Selector:              pulumi.String("query"),
												SelectorMatchOperator: pulumi.String(frontdoor.ManagedRuleExclusionSelectorMatchOperatorEquals),
											},
										},
										RuleId: pulumi.String("942100"),
									},
									&frontdoor.ManagedRuleOverrideArgs{
										EnabledState: pulumi.String(frontdoor.ManagedRuleEnabledStateDisabled),
										RuleId:       pulumi.String("942110"),
									},
								},
							},
						},
						RuleSetAction:  pulumi.String(frontdoor.ManagedRuleSetActionTypeBlock),
						RuleSetType:    pulumi.String("DefaultRuleSet"),
						RuleSetVersion: pulumi.String("1.0"),
					},
				},
			},
			PolicyName: pulumi.String("Policy1"),
			PolicySettings: &frontdoor.PolicySettingsArgs{
				CustomBlockResponseBody:                pulumi.String("PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg=="),
				CustomBlockResponseStatusCode:          pulumi.Int(429),
				EnabledState:                           pulumi.String(frontdoor.PolicyEnabledStateEnabled),
				JavascriptChallengeExpirationInMinutes: pulumi.Int(30),
				Mode:                                   pulumi.String(frontdoor.PolicyModePrevention),
				RedirectUrl:                            pulumi.String("http://www.bing.com"),
				RequestBodyCheck:                       pulumi.String(frontdoor.PolicyRequestBodyCheckDisabled),
				ScrubbingRules: frontdoor.WebApplicationFirewallScrubbingRulesArray{
					&frontdoor.WebApplicationFirewallScrubbingRulesArgs{
						MatchVariable:         pulumi.String(frontdoor.ScrubbingRuleEntryMatchVariableRequestIPAddress),
						SelectorMatchOperator: pulumi.String(frontdoor.ScrubbingRuleEntryMatchOperatorEqualsAny),
						State:                 pulumi.String(frontdoor.ScrubbingRuleEntryStateEnabled),
					},
				},
				State: pulumi.String(frontdoor.WebApplicationFirewallScrubbingStateEnabled),
			},
			ResourceGroupName: pulumi.String("rg1"),
			Sku: &frontdoor.SkuArgs{
				Name: pulumi.String(frontdoor.SkuName_Premium_AzureFrontDoor),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.frontdoor.Policy;
import com.pulumi.azurenative.frontdoor.PolicyArgs;
import com.pulumi.azurenative.frontdoor.inputs.CustomRuleListArgs;
import com.pulumi.azurenative.frontdoor.inputs.ManagedRuleSetListArgs;
import com.pulumi.azurenative.frontdoor.inputs.PolicySettingsArgs;
import com.pulumi.azurenative.frontdoor.inputs.SkuArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var policy = new Policy("policy", PolicyArgs.builder()
            .customRules(CustomRuleListArgs.builder()
                .rules(                
                    CustomRuleArgs.builder()
                        .action("Block")
                        .matchConditions(MatchConditionArgs.builder()
                            .matchValue(                            
                                "192.168.1.0/24",
                                "10.0.0.0/24")
                            .matchVariable("RemoteAddr")
                            .operator("IPMatch")
                            .build())
                        .name("Rule1")
                        .priority(1)
                        .rateLimitThreshold(1000)
                        .ruleType("RateLimitRule")
                        .build(),
                    CustomRuleArgs.builder()
                        .action("Block")
                        .matchConditions(                        
                            MatchConditionArgs.builder()
                                .matchValue("CH")
                                .matchVariable("RemoteAddr")
                                .operator("GeoMatch")
                                .build(),
                            MatchConditionArgs.builder()
                                .matchValue("windows")
                                .matchVariable("RequestHeader")
                                .operator("Contains")
                                .selector("UserAgent")
                                .transforms("Lowercase")
                                .build())
                        .name("Rule2")
                        .priority(2)
                        .ruleType("MatchRule")
                        .build())
                .build())
            .location("WestUs")
            .managedRules(ManagedRuleSetListArgs.builder()
                .managedRuleSets(ManagedRuleSetArgs.builder()
                    .exclusions(ManagedRuleExclusionArgs.builder()
                        .matchVariable("RequestHeaderNames")
                        .selector("User-Agent")
                        .selectorMatchOperator("Equals")
                        .build())
                    .ruleGroupOverrides(ManagedRuleGroupOverrideArgs.builder()
                        .exclusions(ManagedRuleExclusionArgs.builder()
                            .matchVariable("RequestCookieNames")
                            .selector("token")
                            .selectorMatchOperator("StartsWith")
                            .build())
                        .ruleGroupName("SQLI")
                        .rules(                        
                            ManagedRuleOverrideArgs.builder()
                                .action("Redirect")
                                .enabledState("Enabled")
                                .exclusions(ManagedRuleExclusionArgs.builder()
                                    .matchVariable("QueryStringArgNames")
                                    .selector("query")
                                    .selectorMatchOperator("Equals")
                                    .build())
                                .ruleId("942100")
                                .build(),
                            ManagedRuleOverrideArgs.builder()
                                .enabledState("Disabled")
                                .ruleId("942110")
                                .build())
                        .build())
                    .ruleSetAction("Block")
                    .ruleSetType("DefaultRuleSet")
                    .ruleSetVersion("1.0")
                    .build())
                .build())
            .policyName("Policy1")
            .policySettings(PolicySettingsArgs.builder()
                .customBlockResponseBody("PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==")
                .customBlockResponseStatusCode(429)
                .enabledState("Enabled")
                .javascriptChallengeExpirationInMinutes(30)
                .mode("Prevention")
                .redirectUrl("http://www.bing.com")
                .requestBodyCheck("Disabled")
                .scrubbingRules(WebApplicationFirewallScrubbingRulesArgs.builder()
                    .matchVariable("RequestIPAddress")
                    .selectorMatchOperator("EqualsAny")
                    .state("Enabled")
                    .build())
                .state("Enabled")
                .build())
            .resourceGroupName("rg1")
            .sku(SkuArgs.builder()
                .name("Premium_AzureFrontDoor")
                .build())
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const policy = new azure_native.frontdoor.Policy("policy", {
    customRules: {
        rules: [
            {
                action: azure_native.frontdoor.ActionType.Block,
                matchConditions: [{
                    matchValue: [
                        "192.168.1.0/24",
                        "10.0.0.0/24",
                    ],
                    matchVariable: azure_native.frontdoor.MatchVariable.RemoteAddr,
                    operator: azure_native.frontdoor.Operator.IPMatch,
                }],
                name: "Rule1",
                priority: 1,
                rateLimitThreshold: 1000,
                ruleType: azure_native.frontdoor.RuleType.RateLimitRule,
            },
            {
                action: azure_native.frontdoor.ActionType.Block,
                matchConditions: [
                    {
                        matchValue: ["CH"],
                        matchVariable: azure_native.frontdoor.MatchVariable.RemoteAddr,
                        operator: azure_native.frontdoor.Operator.GeoMatch,
                    },
                    {
                        matchValue: ["windows"],
                        matchVariable: azure_native.frontdoor.MatchVariable.RequestHeader,
                        operator: azure_native.frontdoor.Operator.Contains,
                        selector: "UserAgent",
                        transforms: [azure_native.frontdoor.TransformType.Lowercase],
                    },
                ],
                name: "Rule2",
                priority: 2,
                ruleType: azure_native.frontdoor.RuleType.MatchRule,
            },
        ],
    },
    location: "WestUs",
    managedRules: {
        managedRuleSets: [{
            exclusions: [{
                matchVariable: azure_native.frontdoor.ManagedRuleExclusionMatchVariable.RequestHeaderNames,
                selector: "User-Agent",
                selectorMatchOperator: azure_native.frontdoor.ManagedRuleExclusionSelectorMatchOperator.Equals,
            }],
            ruleGroupOverrides: [{
                exclusions: [{
                    matchVariable: azure_native.frontdoor.ManagedRuleExclusionMatchVariable.RequestCookieNames,
                    selector: "token",
                    selectorMatchOperator: azure_native.frontdoor.ManagedRuleExclusionSelectorMatchOperator.StartsWith,
                }],
                ruleGroupName: "SQLI",
                rules: [
                    {
                        action: azure_native.frontdoor.ActionType.Redirect,
                        enabledState: azure_native.frontdoor.ManagedRuleEnabledState.Enabled,
                        exclusions: [{
                            matchVariable: azure_native.frontdoor.ManagedRuleExclusionMatchVariable.QueryStringArgNames,
                            selector: "query",
                            selectorMatchOperator: azure_native.frontdoor.ManagedRuleExclusionSelectorMatchOperator.Equals,
                        }],
                        ruleId: "942100",
                    },
                    {
                        enabledState: azure_native.frontdoor.ManagedRuleEnabledState.Disabled,
                        ruleId: "942110",
                    },
                ],
            }],
            ruleSetAction: azure_native.frontdoor.ManagedRuleSetActionType.Block,
            ruleSetType: "DefaultRuleSet",
            ruleSetVersion: "1.0",
        }],
    },
    policyName: "Policy1",
    policySettings: {
        customBlockResponseBody: "PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==",
        customBlockResponseStatusCode: 429,
        enabledState: azure_native.frontdoor.PolicyEnabledState.Enabled,
        javascriptChallengeExpirationInMinutes: 30,
        mode: azure_native.frontdoor.PolicyMode.Prevention,
        redirectUrl: "http://www.bing.com",
        requestBodyCheck: azure_native.frontdoor.PolicyRequestBodyCheck.Disabled,
        scrubbingRules: [{
            matchVariable: azure_native.frontdoor.ScrubbingRuleEntryMatchVariable.RequestIPAddress,
            selectorMatchOperator: azure_native.frontdoor.ScrubbingRuleEntryMatchOperator.EqualsAny,
            state: azure_native.frontdoor.ScrubbingRuleEntryState.Enabled,
        }],
        state: azure_native.frontdoor.WebApplicationFirewallScrubbingState.Enabled,
    },
    resourceGroupName: "rg1",
    sku: {
        name: azure_native.frontdoor.SkuName.Premium_AzureFrontDoor,
    },
});

    import pulumi
import pulumi_azure_native as azure_native

policy = azure_native.frontdoor.Policy("policy",
    custom_rules={
        "rules": [
            {
                "action": azure_native.frontdoor.ActionType.BLOCK,
                "match_conditions": [{
                    "match_value": [
                        "192.168.1.0/24",
                        "10.0.0.0/24",
                    ],
                    "match_variable": azure_native.frontdoor.MatchVariable.REMOTE_ADDR,
                    "operator": azure_native.frontdoor.Operator.IP_MATCH,
                }],
                "name": "Rule1",
                "priority": 1,
                "rate_limit_threshold": 1000,
                "rule_type": azure_native.frontdoor.RuleType.RATE_LIMIT_RULE,
            },
            {
                "action": azure_native.frontdoor.ActionType.BLOCK,
                "match_conditions": [
                    {
                        "match_value": ["CH"],
                        "match_variable": azure_native.frontdoor.MatchVariable.REMOTE_ADDR,
                        "operator": azure_native.frontdoor.Operator.GEO_MATCH,
                    },
                    {
                        "match_value": ["windows"],
                        "match_variable": azure_native.frontdoor.MatchVariable.REQUEST_HEADER,
                        "operator": azure_native.frontdoor.Operator.CONTAINS,
                        "selector": "UserAgent",
                        "transforms": [azure_native.frontdoor.TransformType.LOWERCASE],
                    },
                ],
                "name": "Rule2",
                "priority": 2,
                "rule_type": azure_native.frontdoor.RuleType.MATCH_RULE,
            },
        ],
    },
    location="WestUs",
    managed_rules={
        "managed_rule_sets": [{
            "exclusions": [{
                "match_variable": azure_native.frontdoor.ManagedRuleExclusionMatchVariable.REQUEST_HEADER_NAMES,
                "selector": "User-Agent",
                "selector_match_operator": azure_native.frontdoor.ManagedRuleExclusionSelectorMatchOperator.EQUALS,
            }],
            "rule_group_overrides": [{
                "exclusions": [{
                    "match_variable": azure_native.frontdoor.ManagedRuleExclusionMatchVariable.REQUEST_COOKIE_NAMES,
                    "selector": "token",
                    "selector_match_operator": azure_native.frontdoor.ManagedRuleExclusionSelectorMatchOperator.STARTS_WITH,
                }],
                "rule_group_name": "SQLI",
                "rules": [
                    {
                        "action": azure_native.frontdoor.ActionType.REDIRECT,
                        "enabled_state": azure_native.frontdoor.ManagedRuleEnabledState.ENABLED,
                        "exclusions": [{
                            "match_variable": azure_native.frontdoor.ManagedRuleExclusionMatchVariable.QUERY_STRING_ARG_NAMES,
                            "selector": "query",
                            "selector_match_operator": azure_native.frontdoor.ManagedRuleExclusionSelectorMatchOperator.EQUALS,
                        }],
                        "rule_id": "942100",
                    },
                    {
                        "enabled_state": azure_native.frontdoor.ManagedRuleEnabledState.DISABLED,
                        "rule_id": "942110",
                    },
                ],
            }],
            "rule_set_action": azure_native.frontdoor.ManagedRuleSetActionType.BLOCK,
            "rule_set_type": "DefaultRuleSet",
            "rule_set_version": "1.0",
        }],
    },
    policy_name="Policy1",
    policy_settings={
        "custom_block_response_body": "PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==",
        "custom_block_response_status_code": 429,
        "enabled_state": azure_native.frontdoor.PolicyEnabledState.ENABLED,
        "javascript_challenge_expiration_in_minutes": 30,
        "mode": azure_native.frontdoor.PolicyMode.PREVENTION,
        "redirect_url": "http://www.bing.com",
        "request_body_check": azure_native.frontdoor.PolicyRequestBodyCheck.DISABLED,
        "scrubbing_rules": [{
            "match_variable": azure_native.frontdoor.ScrubbingRuleEntryMatchVariable.REQUEST_IP_ADDRESS,
            "selector_match_operator": azure_native.frontdoor.ScrubbingRuleEntryMatchOperator.EQUALS_ANY,
            "state": azure_native.frontdoor.ScrubbingRuleEntryState.ENABLED,
        }],
        "state": azure_native.frontdoor.WebApplicationFirewallScrubbingState.ENABLED,
    },
    resource_group_name="rg1",
    sku={
        "name": azure_native.frontdoor.SkuName.PREMIUM_AZURE_FRONT_DOOR,
    })

    resources:
  policy:
    type: azure-native:frontdoor:Policy
    properties:
      customRules:
        rules:
          - action: Block
            matchConditions:
              - matchValue:
                  - 192.168.1.0/24
                  - 10.0.0.0/24
                matchVariable: RemoteAddr
                operator: IPMatch
            name: Rule1
            priority: 1
            rateLimitThreshold: 1000
            ruleType: RateLimitRule
          - action: Block
            matchConditions:
              - matchValue:
                  - CH
                matchVariable: RemoteAddr
                operator: GeoMatch
              - matchValue:
                  - windows
                matchVariable: RequestHeader
                operator: Contains
                selector: UserAgent
                transforms:
                  - Lowercase
            name: Rule2
            priority: 2
            ruleType: MatchRule
      location: WestUs
      managedRules:
        managedRuleSets:
          - exclusions:
              - matchVariable: RequestHeaderNames
                selector: User-Agent
                selectorMatchOperator: Equals
            ruleGroupOverrides:
              - exclusions:
                  - matchVariable: RequestCookieNames
                    selector: token
                    selectorMatchOperator: StartsWith
                ruleGroupName: SQLI
                rules:
                  - action: Redirect
                    enabledState: Enabled
                    exclusions:
                      - matchVariable: QueryStringArgNames
                        selector: query
                        selectorMatchOperator: Equals
                    ruleId: '942100'
                  - enabledState: Disabled
                    ruleId: '942110'
            ruleSetAction: Block
            ruleSetType: DefaultRuleSet
            ruleSetVersion: '1.0'
      policyName: Policy1
      policySettings:
        customBlockResponseBody: PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==
        customBlockResponseStatusCode: 429
        enabledState: Enabled
        javascriptChallengeExpirationInMinutes: 30
        mode: Prevention
        redirectUrl: http://www.bing.com
        requestBodyCheck: Disabled
        scrubbingRules:
          - matchVariable: RequestIPAddress
            selectorMatchOperator: EqualsAny
            state: Enabled
        state: Enabled
      resourceGroupName: rg1
      sku:
        name: Premium_AzureFrontDoor

    Create Policy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Policy(name: string, args: PolicyArgs, opts?: CustomResourceOptions);
    @overload
def Policy(resource_name: str,
           args: PolicyArgs,
           opts: Optional[ResourceOptions] = None)

@overload
def Policy(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           resource_group_name: Optional[str] = None,
           custom_rules: Optional[CustomRuleListArgs] = None,
           location: Optional[str] = None,
           managed_rules: Optional[ManagedRuleSetListArgs] = None,
           policy_name: Optional[str] = None,
           policy_settings: Optional[PolicySettingsArgs] = None,
           sku: Optional[SkuArgs] = None,
           tags: Optional[Mapping[str, str]] = None)
    func NewPolicy(ctx *Context, name string, args PolicyArgs, opts ...ResourceOption) (*Policy, error)
    public Policy(string name, PolicyArgs args, CustomResourceOptions? opts = null)
    public Policy(String name, PolicyArgs args)
public Policy(String name, PolicyArgs args, CustomResourceOptions options)

    type: azure-native:frontdoor:Policy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args PolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args PolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args PolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args PolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args PolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var examplepolicyResourceResourceFromFrontdoor = new AzureNative.FrontDoor.Policy("examplepolicyResourceResourceFromFrontdoor", new()
{
    ResourceGroupName = "string",
    CustomRules = new AzureNative.FrontDoor.Inputs.CustomRuleListArgs
    {
        Rules = new[]
        {
            new AzureNative.FrontDoor.Inputs.CustomRuleArgs
            {
                Action = "string",
                MatchConditions = new[]
                {
                    new AzureNative.FrontDoor.Inputs.MatchConditionArgs
                    {
                        MatchValue = new[]
                        {
                            "string",
                        },
                        MatchVariable = "string",
                        Operator = "string",
                        NegateCondition = false,
                        Selector = "string",
                        Transforms = new[]
                        {
                            "string",
                        },
                    },
                },
                Priority = 0,
                RuleType = "string",
                EnabledState = "string",
                GroupBy = new[]
                {
                    new AzureNative.FrontDoor.Inputs.GroupByVariableArgs
                    {
                        VariableName = "string",
                    },
                },
                Name = "string",
                RateLimitDurationInMinutes = 0,
                RateLimitThreshold = 0,
            },
        },
    },
    Location = "string",
    ManagedRules = new AzureNative.FrontDoor.Inputs.ManagedRuleSetListArgs
    {
        ManagedRuleSets = new[]
        {
            new AzureNative.FrontDoor.Inputs.ManagedRuleSetArgs
            {
                RuleSetType = "string",
                RuleSetVersion = "string",
                Exclusions = new[]
                {
                    new AzureNative.FrontDoor.Inputs.ManagedRuleExclusionArgs
                    {
                        MatchVariable = "string",
                        Selector = "string",
                        SelectorMatchOperator = "string",
                    },
                },
                RuleGroupOverrides = new[]
                {
                    new AzureNative.FrontDoor.Inputs.ManagedRuleGroupOverrideArgs
                    {
                        RuleGroupName = "string",
                        Exclusions = new[]
                        {
                            new AzureNative.FrontDoor.Inputs.ManagedRuleExclusionArgs
                            {
                                MatchVariable = "string",
                                Selector = "string",
                                SelectorMatchOperator = "string",
                            },
                        },
                        Rules = new[]
                        {
                            new AzureNative.FrontDoor.Inputs.ManagedRuleOverrideArgs
                            {
                                RuleId = "string",
                                Action = "string",
                                EnabledState = "string",
                                Exclusions = new[]
                                {
                                    new AzureNative.FrontDoor.Inputs.ManagedRuleExclusionArgs
                                    {
                                        MatchVariable = "string",
                                        Selector = "string",
                                        SelectorMatchOperator = "string",
                                    },
                                },
                            },
                        },
                    },
                },
                RuleSetAction = "string",
            },
        },
    },
    PolicyName = "string",
    PolicySettings = new AzureNative.FrontDoor.Inputs.PolicySettingsArgs
    {
        CustomBlockResponseBody = "string",
        CustomBlockResponseStatusCode = 0,
        EnabledState = "string",
        JavascriptChallengeExpirationInMinutes = 0,
        Mode = "string",
        RedirectUrl = "string",
        RequestBodyCheck = "string",
        ScrubbingRules = new[]
        {
            new AzureNative.FrontDoor.Inputs.WebApplicationFirewallScrubbingRulesArgs
            {
                MatchVariable = "string",
                SelectorMatchOperator = "string",
                Selector = "string",
                State = "string",
            },
        },
        State = "string",
    },
    Sku = new AzureNative.FrontDoor.Inputs.SkuArgs
    {
        Name = "string",
    },
    Tags = 
    {
        { "string", "string" },
    },
});

    example, err := frontdoor.NewPolicy(ctx, "examplepolicyResourceResourceFromFrontdoor", &frontdoor.PolicyArgs{
	ResourceGroupName: pulumi.String("string"),
	CustomRules: &frontdoor.CustomRuleListArgs{
		Rules: frontdoor.CustomRuleArray{
			&frontdoor.CustomRuleArgs{
				Action: pulumi.String("string"),
				MatchConditions: frontdoor.MatchConditionArray{
					&frontdoor.MatchConditionArgs{
						MatchValue: pulumi.StringArray{
							pulumi.String("string"),
						},
						MatchVariable:   pulumi.String("string"),
						Operator:        pulumi.String("string"),
						NegateCondition: pulumi.Bool(false),
						Selector:        pulumi.String("string"),
						Transforms: pulumi.StringArray{
							pulumi.String("string"),
						},
					},
				},
				Priority:     pulumi.Int(0),
				RuleType:     pulumi.String("string"),
				EnabledState: pulumi.String("string"),
				GroupBy: frontdoor.GroupByVariableArray{
					&frontdoor.GroupByVariableArgs{
						VariableName: pulumi.String("string"),
					},
				},
				Name:                       pulumi.String("string"),
				RateLimitDurationInMinutes: pulumi.Int(0),
				RateLimitThreshold:         pulumi.Int(0),
			},
		},
	},
	Location: pulumi.String("string"),
	ManagedRules: &frontdoor.ManagedRuleSetListArgs{
		ManagedRuleSets: frontdoor.ManagedRuleSetArray{
			&frontdoor.ManagedRuleSetArgs{
				RuleSetType:    pulumi.String("string"),
				RuleSetVersion: pulumi.String("string"),
				Exclusions: frontdoor.ManagedRuleExclusionArray{
					&frontdoor.ManagedRuleExclusionArgs{
						MatchVariable:         pulumi.String("string"),
						Selector:              pulumi.String("string"),
						SelectorMatchOperator: pulumi.String("string"),
					},
				},
				RuleGroupOverrides: frontdoor.ManagedRuleGroupOverrideArray{
					&frontdoor.ManagedRuleGroupOverrideArgs{
						RuleGroupName: pulumi.String("string"),
						Exclusions: frontdoor.ManagedRuleExclusionArray{
							&frontdoor.ManagedRuleExclusionArgs{
								MatchVariable:         pulumi.String("string"),
								Selector:              pulumi.String("string"),
								SelectorMatchOperator: pulumi.String("string"),
							},
						},
						Rules: frontdoor.ManagedRuleOverrideArray{
							&frontdoor.ManagedRuleOverrideArgs{
								RuleId:       pulumi.String("string"),
								Action:       pulumi.String("string"),
								EnabledState: pulumi.String("string"),
								Exclusions: frontdoor.ManagedRuleExclusionArray{
									&frontdoor.ManagedRuleExclusionArgs{
										MatchVariable:         pulumi.String("string"),
										Selector:              pulumi.String("string"),
										SelectorMatchOperator: pulumi.String("string"),
									},
								},
							},
						},
					},
				},
				RuleSetAction: pulumi.String("string"),
			},
		},
	},
	PolicyName: pulumi.String("string"),
	PolicySettings: &frontdoor.PolicySettingsArgs{
		CustomBlockResponseBody:                pulumi.String("string"),
		CustomBlockResponseStatusCode:          pulumi.Int(0),
		EnabledState:                           pulumi.String("string"),
		JavascriptChallengeExpirationInMinutes: pulumi.Int(0),
		Mode:                                   pulumi.String("string"),
		RedirectUrl:                            pulumi.String("string"),
		RequestBodyCheck:                       pulumi.String("string"),
		ScrubbingRules: frontdoor.WebApplicationFirewallScrubbingRulesArray{
			&frontdoor.WebApplicationFirewallScrubbingRulesArgs{
				MatchVariable:         pulumi.String("string"),
				SelectorMatchOperator: pulumi.String("string"),
				Selector:              pulumi.String("string"),
				State:                 pulumi.String("string"),
			},
		},
		State: pulumi.String("string"),
	},
	Sku: &frontdoor.SkuArgs{
		Name: pulumi.String("string"),
	},
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
})

    var examplepolicyResourceResourceFromFrontdoor = new com.pulumi.azurenative.frontdoor.Policy("examplepolicyResourceResourceFromFrontdoor", com.pulumi.azurenative.frontdoor.PolicyArgs.builder()
    .resourceGroupName("string")
    .customRules(CustomRuleListArgs.builder()
        .rules(CustomRuleArgs.builder()
            .action("string")
            .matchConditions(MatchConditionArgs.builder()
                .matchValue("string")
                .matchVariable("string")
                .operator("string")
                .negateCondition(false)
                .selector("string")
                .transforms("string")
                .build())
            .priority(0)
            .ruleType("string")
            .enabledState("string")
            .groupBy(GroupByVariableArgs.builder()
                .variableName("string")
                .build())
            .name("string")
            .rateLimitDurationInMinutes(0)
            .rateLimitThreshold(0)
            .build())
        .build())
    .location("string")
    .managedRules(ManagedRuleSetListArgs.builder()
        .managedRuleSets(ManagedRuleSetArgs.builder()
            .ruleSetType("string")
            .ruleSetVersion("string")
            .exclusions(ManagedRuleExclusionArgs.builder()
                .matchVariable("string")
                .selector("string")
                .selectorMatchOperator("string")
                .build())
            .ruleGroupOverrides(ManagedRuleGroupOverrideArgs.builder()
                .ruleGroupName("string")
                .exclusions(ManagedRuleExclusionArgs.builder()
                    .matchVariable("string")
                    .selector("string")
                    .selectorMatchOperator("string")
                    .build())
                .rules(ManagedRuleOverrideArgs.builder()
                    .ruleId("string")
                    .action("string")
                    .enabledState("string")
                    .exclusions(ManagedRuleExclusionArgs.builder()
                        .matchVariable("string")
                        .selector("string")
                        .selectorMatchOperator("string")
                        .build())
                    .build())
                .build())
            .ruleSetAction("string")
            .build())
        .build())
    .policyName("string")
    .policySettings(PolicySettingsArgs.builder()
        .customBlockResponseBody("string")
        .customBlockResponseStatusCode(0)
        .enabledState("string")
        .javascriptChallengeExpirationInMinutes(0)
        .mode("string")
        .redirectUrl("string")
        .requestBodyCheck("string")
        .scrubbingRules(WebApplicationFirewallScrubbingRulesArgs.builder()
            .matchVariable("string")
            .selectorMatchOperator("string")
            .selector("string")
            .state("string")
            .build())
        .state("string")
        .build())
    .sku(SkuArgs.builder()
        .name("string")
        .build())
    .tags(Map.of("string", "string"))
    .build());

    examplepolicy_resource_resource_from_frontdoor = azure_native.frontdoor.Policy("examplepolicyResourceResourceFromFrontdoor",
    resource_group_name="string",
    custom_rules={
        "rules": [{
            "action": "string",
            "match_conditions": [{
                "match_value": ["string"],
                "match_variable": "string",
                "operator": "string",
                "negate_condition": False,
                "selector": "string",
                "transforms": ["string"],
            }],
            "priority": 0,
            "rule_type": "string",
            "enabled_state": "string",
            "group_by": [{
                "variable_name": "string",
            }],
            "name": "string",
            "rate_limit_duration_in_minutes": 0,
            "rate_limit_threshold": 0,
        }],
    },
    location="string",
    managed_rules={
        "managed_rule_sets": [{
            "rule_set_type": "string",
            "rule_set_version": "string",
            "exclusions": [{
                "match_variable": "string",
                "selector": "string",
                "selector_match_operator": "string",
            }],
            "rule_group_overrides": [{
                "rule_group_name": "string",
                "exclusions": [{
                    "match_variable": "string",
                    "selector": "string",
                    "selector_match_operator": "string",
                }],
                "rules": [{
                    "rule_id": "string",
                    "action": "string",
                    "enabled_state": "string",
                    "exclusions": [{
                        "match_variable": "string",
                        "selector": "string",
                        "selector_match_operator": "string",
                    }],
                }],
            }],
            "rule_set_action": "string",
        }],
    },
    policy_name="string",
    policy_settings={
        "custom_block_response_body": "string",
        "custom_block_response_status_code": 0,
        "enabled_state": "string",
        "javascript_challenge_expiration_in_minutes": 0,
        "mode": "string",
        "redirect_url": "string",
        "request_body_check": "string",
        "scrubbing_rules": [{
            "match_variable": "string",
            "selector_match_operator": "string",
            "selector": "string",
            "state": "string",
        }],
        "state": "string",
    },
    sku={
        "name": "string",
    },
    tags={
        "string": "string",
    })

    const examplepolicyResourceResourceFromFrontdoor = new azure_native.frontdoor.Policy("examplepolicyResourceResourceFromFrontdoor", {
    resourceGroupName: "string",
    customRules: {
        rules: [{
            action: "string",
            matchConditions: [{
                matchValue: ["string"],
                matchVariable: "string",
                operator: "string",
                negateCondition: false,
                selector: "string",
                transforms: ["string"],
            }],
            priority: 0,
            ruleType: "string",
            enabledState: "string",
            groupBy: [{
                variableName: "string",
            }],
            name: "string",
            rateLimitDurationInMinutes: 0,
            rateLimitThreshold: 0,
        }],
    },
    location: "string",
    managedRules: {
        managedRuleSets: [{
            ruleSetType: "string",
            ruleSetVersion: "string",
            exclusions: [{
                matchVariable: "string",
                selector: "string",
                selectorMatchOperator: "string",
            }],
            ruleGroupOverrides: [{
                ruleGroupName: "string",
                exclusions: [{
                    matchVariable: "string",
                    selector: "string",
                    selectorMatchOperator: "string",
                }],
                rules: [{
                    ruleId: "string",
                    action: "string",
                    enabledState: "string",
                    exclusions: [{
                        matchVariable: "string",
                        selector: "string",
                        selectorMatchOperator: "string",
                    }],
                }],
            }],
            ruleSetAction: "string",
        }],
    },
    policyName: "string",
    policySettings: {
        customBlockResponseBody: "string",
        customBlockResponseStatusCode: 0,
        enabledState: "string",
        javascriptChallengeExpirationInMinutes: 0,
        mode: "string",
        redirectUrl: "string",
        requestBodyCheck: "string",
        scrubbingRules: [{
            matchVariable: "string",
            selectorMatchOperator: "string",
            selector: "string",
            state: "string",
        }],
        state: "string",
    },
    sku: {
        name: "string",
    },
    tags: {
        string: "string",
    },
});

    type: azure-native:frontdoor:Policy
properties:
    customRules:
        rules:
            - action: string
              enabledState: string
              groupBy:
                - variableName: string
              matchConditions:
                - matchValue:
                    - string
                  matchVariable: string
                  negateCondition: false
                  operator: string
                  selector: string
                  transforms:
                    - string
              name: string
              priority: 0
              rateLimitDurationInMinutes: 0
              rateLimitThreshold: 0
              ruleType: string
    location: string
    managedRules:
        managedRuleSets:
            - exclusions:
                - matchVariable: string
                  selector: string
                  selectorMatchOperator: string
              ruleGroupOverrides:
                - exclusions:
                    - matchVariable: string
                      selector: string
                      selectorMatchOperator: string
                  ruleGroupName: string
                  rules:
                    - action: string
                      enabledState: string
                      exclusions:
                        - matchVariable: string
                          selector: string
                          selectorMatchOperator: string
                      ruleId: string
              ruleSetAction: string
              ruleSetType: string
              ruleSetVersion: string
    policyName: string
    policySettings:
        customBlockResponseBody: string
        customBlockResponseStatusCode: 0
        enabledState: string
        javascriptChallengeExpirationInMinutes: 0
        mode: string
        redirectUrl: string
        requestBodyCheck: string
        scrubbingRules:
            - matchVariable: string
              selector: string
              selectorMatchOperator: string
              state: string
        state: string
    resourceGroupName: string
    sku:
        name: string
    tags:
        string: string

    Policy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Policy resource accepts the following input properties:

    ResourceGroupName string
    Name of the Resource group within the Azure subscription.
    CustomRules Pulumi.AzureNative.FrontDoor.Inputs.CustomRuleList
    Describes custom rules inside the policy.
    Location string
    Resource location.
    ManagedRules Pulumi.AzureNative.FrontDoor.Inputs.ManagedRuleSetList
    Describes managed rules inside the policy.
    PolicyName string
    The name of the Web Application Firewall Policy.
    PolicySettings Pulumi.AzureNative.FrontDoor.Inputs.PolicySettings
    Describes settings for the policy.
    Sku Pulumi.AzureNative.FrontDoor.Inputs.Sku
    The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
    Tags Dictionary<string, string>
    Resource tags.
    ResourceGroupName string
    Name of the Resource group within the Azure subscription.
    CustomRules CustomRuleListArgs
    Describes custom rules inside the policy.
    Location string
    Resource location.
    ManagedRules ManagedRuleSetListArgs
    Describes managed rules inside the policy.
    PolicyName string
    The name of the Web Application Firewall Policy.
    PolicySettings PolicySettingsArgs
    Describes settings for the policy.
    Sku SkuArgs
    The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
    Tags map[string]string
    Resource tags.
    resourceGroupName String
    Name of the Resource group within the Azure subscription.
    customRules CustomRuleList
    Describes custom rules inside the policy.
    location String
    Resource location.
    managedRules ManagedRuleSetList
    Describes managed rules inside the policy.
    policyName String
    The name of the Web Application Firewall Policy.
    policySettings PolicySettings
    Describes settings for the policy.
    sku Sku
    The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
    tags Map<String,String>
    Resource tags.
    resourceGroupName string
    Name of the Resource group within the Azure subscription.
    customRules CustomRuleList
    Describes custom rules inside the policy.
    location string
    Resource location.
    managedRules ManagedRuleSetList
    Describes managed rules inside the policy.
    policyName string
    The name of the Web Application Firewall Policy.
    policySettings PolicySettings
    Describes settings for the policy.
    sku Sku
    The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
    tags {[key: string]: string}
    Resource tags.
    resource_group_name str
    Name of the Resource group within the Azure subscription.
    custom_rules CustomRuleListArgs
    Describes custom rules inside the policy.
    location str
    Resource location.
    managed_rules ManagedRuleSetListArgs
    Describes managed rules inside the policy.
    policy_name str
    The name of the Web Application Firewall Policy.
    policy_settings PolicySettingsArgs
    Describes settings for the policy.
    sku SkuArgs
    The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
    tags Mapping[str, str]
    Resource tags.
    resourceGroupName String
    Name of the Resource group within the Azure subscription.
    customRules Property Map
    Describes custom rules inside the policy.
    location String
    Resource location.
    managedRules Property Map
    Describes managed rules inside the policy.
    policyName String
    The name of the Web Application Firewall Policy.
    policySettings Property Map
    Describes settings for the policy.
    sku Property Map
    The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
    tags Map<String>
    Resource tags.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Policy resource produces the following output properties:

    AzureApiVersion string
    The Azure API version of the resource.
    FrontendEndpointLinks List<Pulumi.AzureNative.FrontDoor.Outputs.FrontendEndpointLinkResponse>
    Describes Frontend Endpoints associated with this Web Application Firewall policy.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Resource name.
    ProvisioningState string
    Provisioning state of the policy.
    ResourceState string
    RoutingRuleLinks List<Pulumi.AzureNative.FrontDoor.Outputs.RoutingRuleLinkResponse>
    Describes Routing Rules associated with this Web Application Firewall policy.
    SecurityPolicyLinks List<Pulumi.AzureNative.FrontDoor.Outputs.SecurityPolicyLinkResponse>
    Describes Security Policy associated with this Web Application Firewall policy.
    Type string
    Resource type.
    Etag string
    Gets a unique read-only string that changes whenever the resource is updated.
    AzureApiVersion string
    The Azure API version of the resource.
    FrontendEndpointLinks []FrontendEndpointLinkResponse
    Describes Frontend Endpoints associated with this Web Application Firewall policy.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Resource name.
    ProvisioningState string
    Provisioning state of the policy.
    ResourceState string
    RoutingRuleLinks []RoutingRuleLinkResponse
    Describes Routing Rules associated with this Web Application Firewall policy.
    SecurityPolicyLinks []SecurityPolicyLinkResponse
    Describes Security Policy associated with this Web Application Firewall policy.
    Type string
    Resource type.
    Etag string
    Gets a unique read-only string that changes whenever the resource is updated.
    azureApiVersion String
    The Azure API version of the resource.
    frontendEndpointLinks List<FrontendEndpointLinkResponse>
    Describes Frontend Endpoints associated with this Web Application Firewall policy.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Resource name.
    provisioningState String
    Provisioning state of the policy.
    resourceState String
    routingRuleLinks List<RoutingRuleLinkResponse>
    Describes Routing Rules associated with this Web Application Firewall policy.
    securityPolicyLinks List<SecurityPolicyLinkResponse>
    Describes Security Policy associated with this Web Application Firewall policy.
    type String
    Resource type.
    etag String
    Gets a unique read-only string that changes whenever the resource is updated.
    azureApiVersion string
    The Azure API version of the resource.
    frontendEndpointLinks FrontendEndpointLinkResponse[]
    Describes Frontend Endpoints associated with this Web Application Firewall policy.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    Resource name.
    provisioningState string
    Provisioning state of the policy.
    resourceState string
    routingRuleLinks RoutingRuleLinkResponse[]
    Describes Routing Rules associated with this Web Application Firewall policy.
    securityPolicyLinks SecurityPolicyLinkResponse[]
    Describes Security Policy associated with this Web Application Firewall policy.
    type string
    Resource type.
    etag string
    Gets a unique read-only string that changes whenever the resource is updated.
    azure_api_version str
    The Azure API version of the resource.
    frontend_endpoint_links Sequence[FrontendEndpointLinkResponse]
    Describes Frontend Endpoints associated with this Web Application Firewall policy.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    Resource name.
    provisioning_state str
    Provisioning state of the policy.
    resource_state str
    routing_rule_links Sequence[RoutingRuleLinkResponse]
    Describes Routing Rules associated with this Web Application Firewall policy.
    security_policy_links Sequence[SecurityPolicyLinkResponse]
    Describes Security Policy associated with this Web Application Firewall policy.
    type str
    Resource type.
    etag str
    Gets a unique read-only string that changes whenever the resource is updated.
    azureApiVersion String
    The Azure API version of the resource.
    frontendEndpointLinks List<Property Map>
    Describes Frontend Endpoints associated with this Web Application Firewall policy.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Resource name.
    provisioningState String
    Provisioning state of the policy.
    resourceState String
    routingRuleLinks List<Property Map>
    Describes Routing Rules associated with this Web Application Firewall policy.
    securityPolicyLinks List<Property Map>
    Describes Security Policy associated with this Web Application Firewall policy.
    type String
    Resource type.
    etag String
    Gets a unique read-only string that changes whenever the resource is updated.

    Supporting Types

    ActionType, ActionTypeArgs

    Allow
    Allow
    Block
    Block
    Log
    Log
    Redirect
    Redirect
    AnomalyScoring
    AnomalyScoring
    JSChallenge
    JSChallenge
    ActionTypeAllow
    Allow
    ActionTypeBlock
    Block
    ActionTypeLog
    Log
    ActionTypeRedirect
    Redirect
    ActionTypeAnomalyScoring
    AnomalyScoring
    ActionTypeJSChallenge
    JSChallenge
    Allow
    Allow
    Block
    Block
    Log
    Log
    Redirect
    Redirect
    AnomalyScoring
    AnomalyScoring
    JSChallenge
    JSChallenge
    Allow
    Allow
    Block
    Block
    Log
    Log
    Redirect
    Redirect
    AnomalyScoring
    AnomalyScoring
    JSChallenge
    JSChallenge
    ALLOW
    Allow
    BLOCK
    Block
    LOG
    Log
    REDIRECT
    Redirect
    ANOMALY_SCORING
    AnomalyScoring
    JS_CHALLENGE
    JSChallenge
    "Allow"
    Allow
    "Block"
    Block
    "Log"
    Log
    "Redirect"
    Redirect
    "AnomalyScoring"
    AnomalyScoring
    "JSChallenge"
    JSChallenge

    CustomRule, CustomRuleArgs

    Action string | Pulumi.AzureNative.FrontDoor.ActionType
    Describes what action to be applied when rule matches.
    MatchConditions List<Pulumi.AzureNative.FrontDoor.Inputs.MatchCondition>
    List of match conditions.
    Priority int
    Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
    RuleType string | Pulumi.AzureNative.FrontDoor.RuleType
    Describes type of rule.
    EnabledState string | Pulumi.AzureNative.FrontDoor.CustomRuleEnabledState
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    GroupBy List<Pulumi.AzureNative.FrontDoor.Inputs.GroupByVariable>
    Describes the list of variables to group the rate limit requests
    Name string
    Describes the name of the rule.
    RateLimitDurationInMinutes int
    Time window for resetting the rate limit count. Default is 1 minute.
    RateLimitThreshold int
    Number of allowed requests per client within the time window.
    Action string | ActionType
    Describes what action to be applied when rule matches.
    MatchConditions []MatchCondition
    List of match conditions.
    Priority int
    Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
    RuleType string | RuleType
    Describes type of rule.
    EnabledState string | CustomRuleEnabledState
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    GroupBy []GroupByVariable
    Describes the list of variables to group the rate limit requests
    Name string
    Describes the name of the rule.
    RateLimitDurationInMinutes int
    Time window for resetting the rate limit count. Default is 1 minute.
    RateLimitThreshold int
    Number of allowed requests per client within the time window.
    action String | ActionType
    Describes what action to be applied when rule matches.
    matchConditions List<MatchCondition>
    List of match conditions.
    priority Integer
    Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
    ruleType String | RuleType
    Describes type of rule.
    enabledState String | CustomRuleEnabledState
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    groupBy List<GroupByVariable>
    Describes the list of variables to group the rate limit requests
    name String
    Describes the name of the rule.
    rateLimitDurationInMinutes Integer
    Time window for resetting the rate limit count. Default is 1 minute.
    rateLimitThreshold Integer
    Number of allowed requests per client within the time window.
    action string | ActionType
    Describes what action to be applied when rule matches.
    matchConditions MatchCondition[]
    List of match conditions.
    priority number
    Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
    ruleType string | RuleType
    Describes type of rule.
    enabledState string | CustomRuleEnabledState
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    groupBy GroupByVariable[]
    Describes the list of variables to group the rate limit requests
    name string
    Describes the name of the rule.
    rateLimitDurationInMinutes number
    Time window for resetting the rate limit count. Default is 1 minute.
    rateLimitThreshold number
    Number of allowed requests per client within the time window.
    action str | ActionType
    Describes what action to be applied when rule matches.
    match_conditions Sequence[MatchCondition]
    List of match conditions.
    priority int
    Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
    rule_type str | RuleType
    Describes type of rule.
    enabled_state str | CustomRuleEnabledState
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    group_by Sequence[GroupByVariable]
    Describes the list of variables to group the rate limit requests
    name str
    Describes the name of the rule.
    rate_limit_duration_in_minutes int
    Time window for resetting the rate limit count. Default is 1 minute.
    rate_limit_threshold int
    Number of allowed requests per client within the time window.
    action String | "Allow" | "Block" | "Log" | "Redirect" | "AnomalyScoring" | "JSChallenge"
    Describes what action to be applied when rule matches.
    matchConditions List<Property Map>
    List of match conditions.
    priority Number
    Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
    ruleType String | "MatchRule" | "RateLimitRule"
    Describes type of rule.
    enabledState String | "Disabled" | "Enabled"
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    groupBy List<Property Map>
    Describes the list of variables to group the rate limit requests
    name String
    Describes the name of the rule.
    rateLimitDurationInMinutes Number
    Time window for resetting the rate limit count. Default is 1 minute.
    rateLimitThreshold Number
    Number of allowed requests per client within the time window.

    CustomRuleEnabledState, CustomRuleEnabledStateArgs

    Disabled
    Disabled
    Enabled
    Enabled
    CustomRuleEnabledStateDisabled
    Disabled
    CustomRuleEnabledStateEnabled
    Enabled
    Disabled
    Disabled
    Enabled
    Enabled
    Disabled
    Disabled
    Enabled
    Enabled
    DISABLED
    Disabled
    ENABLED
    Enabled
    "Disabled"
    Disabled
    "Enabled"
    Enabled

    CustomRuleList, CustomRuleListArgs

    Rules []CustomRule
    List of rules
    rules List<CustomRule>
    List of rules
    rules CustomRule[]
    List of rules

    CustomRuleListResponse, CustomRuleListResponseArgs

    CustomRuleResponse, CustomRuleResponseArgs

    Action string
    Describes what action to be applied when rule matches.
    MatchConditions List<Pulumi.AzureNative.FrontDoor.Inputs.MatchConditionResponse>
    List of match conditions.
    Priority int
    Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
    RuleType string
    Describes type of rule.
    EnabledState string
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    GroupBy List<Pulumi.AzureNative.FrontDoor.Inputs.GroupByVariableResponse>
    Describes the list of variables to group the rate limit requests
    Name string
    Describes the name of the rule.
    RateLimitDurationInMinutes int
    Time window for resetting the rate limit count. Default is 1 minute.
    RateLimitThreshold int
    Number of allowed requests per client within the time window.
    Action string
    Describes what action to be applied when rule matches.
    MatchConditions []MatchConditionResponse
    List of match conditions.
    Priority int
    Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
    RuleType string
    Describes type of rule.
    EnabledState string
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    GroupBy []GroupByVariableResponse
    Describes the list of variables to group the rate limit requests
    Name string
    Describes the name of the rule.
    RateLimitDurationInMinutes int
    Time window for resetting the rate limit count. Default is 1 minute.
    RateLimitThreshold int
    Number of allowed requests per client within the time window.
    action String
    Describes what action to be applied when rule matches.
    matchConditions List<MatchConditionResponse>
    List of match conditions.
    priority Integer
    Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
    ruleType String
    Describes type of rule.
    enabledState String
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    groupBy List<GroupByVariableResponse>
    Describes the list of variables to group the rate limit requests
    name String
    Describes the name of the rule.
    rateLimitDurationInMinutes Integer
    Time window for resetting the rate limit count. Default is 1 minute.
    rateLimitThreshold Integer
    Number of allowed requests per client within the time window.
    action string
    Describes what action to be applied when rule matches.
    matchConditions MatchConditionResponse[]
    List of match conditions.
    priority number
    Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
    ruleType string
    Describes type of rule.
    enabledState string
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    groupBy GroupByVariableResponse[]
    Describes the list of variables to group the rate limit requests
    name string
    Describes the name of the rule.
    rateLimitDurationInMinutes number
    Time window for resetting the rate limit count. Default is 1 minute.
    rateLimitThreshold number
    Number of allowed requests per client within the time window.
    action str
    Describes what action to be applied when rule matches.
    match_conditions Sequence[MatchConditionResponse]
    List of match conditions.
    priority int
    Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
    rule_type str
    Describes type of rule.
    enabled_state str
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    group_by Sequence[GroupByVariableResponse]
    Describes the list of variables to group the rate limit requests
    name str
    Describes the name of the rule.
    rate_limit_duration_in_minutes int
    Time window for resetting the rate limit count. Default is 1 minute.
    rate_limit_threshold int
    Number of allowed requests per client within the time window.
    action String
    Describes what action to be applied when rule matches.
    matchConditions List<Property Map>
    List of match conditions.
    priority Number
    Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
    ruleType String
    Describes type of rule.
    enabledState String
    Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
    groupBy List<Property Map>
    Describes the list of variables to group the rate limit requests
    name String
    Describes the name of the rule.
    rateLimitDurationInMinutes Number
    Time window for resetting the rate limit count. Default is 1 minute.
    rateLimitThreshold Number
    Number of allowed requests per client within the time window.

    FrontendEndpointLinkResponse, FrontendEndpointLinkResponseArgs

    Id string
    Resource ID.
    Id string
    Resource ID.
    id String
    Resource ID.
    id string
    Resource ID.
    id str
    Resource ID.
    id String
    Resource ID.

    GroupByVariable, GroupByVariableArgs

    VariableName string | Pulumi.AzureNative.FrontDoor.VariableName
    Describes the supported variable for group by
    VariableName string | VariableName
    Describes the supported variable for group by
    variableName String | VariableName
    Describes the supported variable for group by
    variableName string | VariableName
    Describes the supported variable for group by
    variable_name str | VariableName
    Describes the supported variable for group by
    variableName String | "SocketAddr" | "GeoLocation" | "None"
    Describes the supported variable for group by

    GroupByVariableResponse, GroupByVariableResponseArgs

    VariableName string
    Describes the supported variable for group by
    VariableName string
    Describes the supported variable for group by
    variableName String
    Describes the supported variable for group by
    variableName string
    Describes the supported variable for group by
    variable_name str
    Describes the supported variable for group by
    variableName String
    Describes the supported variable for group by

    ManagedRuleEnabledState, ManagedRuleEnabledStateArgs

    Disabled
    Disabled
    Enabled
    Enabled
    ManagedRuleEnabledStateDisabled
    Disabled
    ManagedRuleEnabledStateEnabled
    Enabled
    Disabled
    Disabled
    Enabled
    Enabled
    Disabled
    Disabled
    Enabled
    Enabled
    DISABLED
    Disabled
    ENABLED
    Enabled
    "Disabled"
    Disabled
    "Enabled"
    Enabled

    ManagedRuleExclusion, ManagedRuleExclusionArgs

    MatchVariable string | Pulumi.AzureNative.FrontDoor.ManagedRuleExclusionMatchVariable
    The variable type to be excluded.
    Selector string
    Selector value for which elements in the collection this exclusion applies to.
    SelectorMatchOperator string | Pulumi.AzureNative.FrontDoor.ManagedRuleExclusionSelectorMatchOperator
    Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
    MatchVariable string | ManagedRuleExclusionMatchVariable
    The variable type to be excluded.
    Selector string
    Selector value for which elements in the collection this exclusion applies to.
    SelectorMatchOperator string | ManagedRuleExclusionSelectorMatchOperator
    Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
    matchVariable String | ManagedRuleExclusionMatchVariable
    The variable type to be excluded.
    selector String
    Selector value for which elements in the collection this exclusion applies to.
    selectorMatchOperator String | ManagedRuleExclusionSelectorMatchOperator
    Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
    matchVariable string | ManagedRuleExclusionMatchVariable
    The variable type to be excluded.
    selector string
    Selector value for which elements in the collection this exclusion applies to.
    selectorMatchOperator string | ManagedRuleExclusionSelectorMatchOperator
    Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
    match_variable str | ManagedRuleExclusionMatchVariable
    The variable type to be excluded.
    selector str
    Selector value for which elements in the collection this exclusion applies to.
    selector_match_operator str | ManagedRuleExclusionSelectorMatchOperator
    Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
    matchVariable String | "RequestHeaderNames" | "RequestCookieNames" | "QueryStringArgNames" | "RequestBodyPostArgNames" | "RequestBodyJsonArgNames"
    The variable type to be excluded.
    selector String
    Selector value for which elements in the collection this exclusion applies to.
    selectorMatchOperator String | "Equals" | "Contains" | "StartsWith" | "EndsWith" | "EqualsAny"
    Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

    ManagedRuleExclusionMatchVariable, ManagedRuleExclusionMatchVariableArgs

    RequestHeaderNames
    RequestHeaderNames
    RequestCookieNames
    RequestCookieNames
    QueryStringArgNames
    QueryStringArgNames
    RequestBodyPostArgNames
    RequestBodyPostArgNames
    RequestBodyJsonArgNames
    RequestBodyJsonArgNames
    ManagedRuleExclusionMatchVariableRequestHeaderNames
    RequestHeaderNames
    ManagedRuleExclusionMatchVariableRequestCookieNames
    RequestCookieNames
    ManagedRuleExclusionMatchVariableQueryStringArgNames
    QueryStringArgNames
    ManagedRuleExclusionMatchVariableRequestBodyPostArgNames
    RequestBodyPostArgNames
    ManagedRuleExclusionMatchVariableRequestBodyJsonArgNames
    RequestBodyJsonArgNames
    RequestHeaderNames
    RequestHeaderNames
    RequestCookieNames
    RequestCookieNames
    QueryStringArgNames
    QueryStringArgNames
    RequestBodyPostArgNames
    RequestBodyPostArgNames
    RequestBodyJsonArgNames
    RequestBodyJsonArgNames
    RequestHeaderNames
    RequestHeaderNames
    RequestCookieNames
    RequestCookieNames
    QueryStringArgNames
    QueryStringArgNames
    RequestBodyPostArgNames
    RequestBodyPostArgNames
    RequestBodyJsonArgNames
    RequestBodyJsonArgNames
    REQUEST_HEADER_NAMES
    RequestHeaderNames
    REQUEST_COOKIE_NAMES
    RequestCookieNames
    QUERY_STRING_ARG_NAMES
    QueryStringArgNames
    REQUEST_BODY_POST_ARG_NAMES
    RequestBodyPostArgNames
    REQUEST_BODY_JSON_ARG_NAMES
    RequestBodyJsonArgNames
    "RequestHeaderNames"
    RequestHeaderNames
    "RequestCookieNames"
    RequestCookieNames
    "QueryStringArgNames"
    QueryStringArgNames
    "RequestBodyPostArgNames"
    RequestBodyPostArgNames
    "RequestBodyJsonArgNames"
    RequestBodyJsonArgNames

    ManagedRuleExclusionResponse, ManagedRuleExclusionResponseArgs

    MatchVariable string
    The variable type to be excluded.
    Selector string
    Selector value for which elements in the collection this exclusion applies to.
    SelectorMatchOperator string
    Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
    MatchVariable string
    The variable type to be excluded.
    Selector string
    Selector value for which elements in the collection this exclusion applies to.
    SelectorMatchOperator string
    Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
    matchVariable String
    The variable type to be excluded.
    selector String
    Selector value for which elements in the collection this exclusion applies to.
    selectorMatchOperator String
    Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
    matchVariable string
    The variable type to be excluded.
    selector string
    Selector value for which elements in the collection this exclusion applies to.
    selectorMatchOperator string
    Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
    match_variable str
    The variable type to be excluded.
    selector str
    Selector value for which elements in the collection this exclusion applies to.
    selector_match_operator str
    Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.
    matchVariable String
    The variable type to be excluded.
    selector String
    Selector value for which elements in the collection this exclusion applies to.
    selectorMatchOperator String
    Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

    ManagedRuleExclusionSelectorMatchOperator, ManagedRuleExclusionSelectorMatchOperatorArgs

    EqualsValue
    Equals
    Contains
    Contains
    StartsWith
    StartsWith
    EndsWith
    EndsWith
    EqualsAny
    EqualsAny
    ManagedRuleExclusionSelectorMatchOperatorEquals
    Equals
    ManagedRuleExclusionSelectorMatchOperatorContains
    Contains
    ManagedRuleExclusionSelectorMatchOperatorStartsWith
    StartsWith
    ManagedRuleExclusionSelectorMatchOperatorEndsWith
    EndsWith
    ManagedRuleExclusionSelectorMatchOperatorEqualsAny
    EqualsAny
    Equals
    Equals
    Contains
    Contains
    StartsWith
    StartsWith
    EndsWith
    EndsWith
    EqualsAny
    EqualsAny
    Equals
    Equals
    Contains
    Contains
    StartsWith
    StartsWith
    EndsWith
    EndsWith
    EqualsAny
    EqualsAny
    EQUALS
    Equals
    CONTAINS
    Contains
    STARTS_WITH
    StartsWith
    ENDS_WITH
    EndsWith
    EQUALS_ANY
    EqualsAny
    "Equals"
    Equals
    "Contains"
    Contains
    "StartsWith"
    StartsWith
    "EndsWith"
    EndsWith
    "EqualsAny"
    EqualsAny

    ManagedRuleGroupOverride, ManagedRuleGroupOverrideArgs

    RuleGroupName string
    Describes the managed rule group to override.
    Exclusions List<Pulumi.AzureNative.FrontDoor.Inputs.ManagedRuleExclusion>
    Describes the exclusions that are applied to all rules in the group.
    Rules List<Pulumi.AzureNative.FrontDoor.Inputs.ManagedRuleOverride>
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    RuleGroupName string
    Describes the managed rule group to override.
    Exclusions []ManagedRuleExclusion
    Describes the exclusions that are applied to all rules in the group.
    Rules []ManagedRuleOverride
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    ruleGroupName String
    Describes the managed rule group to override.
    exclusions List<ManagedRuleExclusion>
    Describes the exclusions that are applied to all rules in the group.
    rules List<ManagedRuleOverride>
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    ruleGroupName string
    Describes the managed rule group to override.
    exclusions ManagedRuleExclusion[]
    Describes the exclusions that are applied to all rules in the group.
    rules ManagedRuleOverride[]
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    rule_group_name str
    Describes the managed rule group to override.
    exclusions Sequence[ManagedRuleExclusion]
    Describes the exclusions that are applied to all rules in the group.
    rules Sequence[ManagedRuleOverride]
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    ruleGroupName String
    Describes the managed rule group to override.
    exclusions List<Property Map>
    Describes the exclusions that are applied to all rules in the group.
    rules List<Property Map>
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.

    ManagedRuleGroupOverrideResponse, ManagedRuleGroupOverrideResponseArgs

    RuleGroupName string
    Describes the managed rule group to override.
    Exclusions List<Pulumi.AzureNative.FrontDoor.Inputs.ManagedRuleExclusionResponse>
    Describes the exclusions that are applied to all rules in the group.
    Rules List<Pulumi.AzureNative.FrontDoor.Inputs.ManagedRuleOverrideResponse>
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    RuleGroupName string
    Describes the managed rule group to override.
    Exclusions []ManagedRuleExclusionResponse
    Describes the exclusions that are applied to all rules in the group.
    Rules []ManagedRuleOverrideResponse
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    ruleGroupName String
    Describes the managed rule group to override.
    exclusions List<ManagedRuleExclusionResponse>
    Describes the exclusions that are applied to all rules in the group.
    rules List<ManagedRuleOverrideResponse>
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    ruleGroupName string
    Describes the managed rule group to override.
    exclusions ManagedRuleExclusionResponse[]
    Describes the exclusions that are applied to all rules in the group.
    rules ManagedRuleOverrideResponse[]
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    rule_group_name str
    Describes the managed rule group to override.
    exclusions Sequence[ManagedRuleExclusionResponse]
    Describes the exclusions that are applied to all rules in the group.
    rules Sequence[ManagedRuleOverrideResponse]
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.
    ruleGroupName String
    Describes the managed rule group to override.
    exclusions List<Property Map>
    Describes the exclusions that are applied to all rules in the group.
    rules List<Property Map>
    List of rules that will be disabled. If none specified, all rules in the group will be disabled.

    ManagedRuleOverride, ManagedRuleOverrideArgs

    RuleId string
    Identifier for the managed rule.
    Action string | Pulumi.AzureNative.FrontDoor.ActionType
    Describes the override action to be applied when rule matches.
    EnabledState string | Pulumi.AzureNative.FrontDoor.ManagedRuleEnabledState
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    Exclusions List<Pulumi.AzureNative.FrontDoor.Inputs.ManagedRuleExclusion>
    Describes the exclusions that are applied to this specific rule.
    RuleId string
    Identifier for the managed rule.
    Action string | ActionType
    Describes the override action to be applied when rule matches.
    EnabledState string | ManagedRuleEnabledState
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    Exclusions []ManagedRuleExclusion
    Describes the exclusions that are applied to this specific rule.
    ruleId String
    Identifier for the managed rule.
    action String | ActionType
    Describes the override action to be applied when rule matches.
    enabledState String | ManagedRuleEnabledState
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    exclusions List<ManagedRuleExclusion>
    Describes the exclusions that are applied to this specific rule.
    ruleId string
    Identifier for the managed rule.
    action string | ActionType
    Describes the override action to be applied when rule matches.
    enabledState string | ManagedRuleEnabledState
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    exclusions ManagedRuleExclusion[]
    Describes the exclusions that are applied to this specific rule.
    rule_id str
    Identifier for the managed rule.
    action str | ActionType
    Describes the override action to be applied when rule matches.
    enabled_state str | ManagedRuleEnabledState
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    exclusions Sequence[ManagedRuleExclusion]
    Describes the exclusions that are applied to this specific rule.
    ruleId String
    Identifier for the managed rule.
    action String | "Allow" | "Block" | "Log" | "Redirect" | "AnomalyScoring" | "JSChallenge"
    Describes the override action to be applied when rule matches.
    enabledState String | "Disabled" | "Enabled"
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    exclusions List<Property Map>
    Describes the exclusions that are applied to this specific rule.

    ManagedRuleOverrideResponse, ManagedRuleOverrideResponseArgs

    RuleId string
    Identifier for the managed rule.
    Action string
    Describes the override action to be applied when rule matches.
    EnabledState string
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    Exclusions List<Pulumi.AzureNative.FrontDoor.Inputs.ManagedRuleExclusionResponse>
    Describes the exclusions that are applied to this specific rule.
    RuleId string
    Identifier for the managed rule.
    Action string
    Describes the override action to be applied when rule matches.
    EnabledState string
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    Exclusions []ManagedRuleExclusionResponse
    Describes the exclusions that are applied to this specific rule.
    ruleId String
    Identifier for the managed rule.
    action String
    Describes the override action to be applied when rule matches.
    enabledState String
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    exclusions List<ManagedRuleExclusionResponse>
    Describes the exclusions that are applied to this specific rule.
    ruleId string
    Identifier for the managed rule.
    action string
    Describes the override action to be applied when rule matches.
    enabledState string
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    exclusions ManagedRuleExclusionResponse[]
    Describes the exclusions that are applied to this specific rule.
    rule_id str
    Identifier for the managed rule.
    action str
    Describes the override action to be applied when rule matches.
    enabled_state str
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    exclusions Sequence[ManagedRuleExclusionResponse]
    Describes the exclusions that are applied to this specific rule.
    ruleId String
    Identifier for the managed rule.
    action String
    Describes the override action to be applied when rule matches.
    enabledState String
    Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
    exclusions List<Property Map>
    Describes the exclusions that are applied to this specific rule.

    ManagedRuleSet, ManagedRuleSetArgs

    RuleSetType string
    Defines the rule set type to use.
    RuleSetVersion string
    Defines the version of the rule set to use.
    Exclusions List<Pulumi.AzureNative.FrontDoor.Inputs.ManagedRuleExclusion>
    Describes the exclusions that are applied to all rules in the set.
    RuleGroupOverrides List<Pulumi.AzureNative.FrontDoor.Inputs.ManagedRuleGroupOverride>
    Defines the rule group overrides to apply to the rule set.
    RuleSetAction string | Pulumi.AzureNative.FrontDoor.ManagedRuleSetActionType
    Defines the rule set action.
    RuleSetType string
    Defines the rule set type to use.
    RuleSetVersion string
    Defines the version of the rule set to use.
    Exclusions []ManagedRuleExclusion
    Describes the exclusions that are applied to all rules in the set.
    RuleGroupOverrides []ManagedRuleGroupOverride
    Defines the rule group overrides to apply to the rule set.
    RuleSetAction string | ManagedRuleSetActionType
    Defines the rule set action.
    ruleSetType String
    Defines the rule set type to use.
    ruleSetVersion String
    Defines the version of the rule set to use.
    exclusions List<ManagedRuleExclusion>
    Describes the exclusions that are applied to all rules in the set.
    ruleGroupOverrides List<ManagedRuleGroupOverride>
    Defines the rule group overrides to apply to the rule set.
    ruleSetAction String | ManagedRuleSetActionType
    Defines the rule set action.
    ruleSetType string
    Defines the rule set type to use.
    ruleSetVersion string
    Defines the version of the rule set to use.
    exclusions ManagedRuleExclusion[]
    Describes the exclusions that are applied to all rules in the set.
    ruleGroupOverrides ManagedRuleGroupOverride[]
    Defines the rule group overrides to apply to the rule set.
    ruleSetAction string | ManagedRuleSetActionType
    Defines the rule set action.
    rule_set_type str
    Defines the rule set type to use.
    rule_set_version str
    Defines the version of the rule set to use.
    exclusions Sequence[ManagedRuleExclusion]
    Describes the exclusions that are applied to all rules in the set.
    rule_group_overrides Sequence[ManagedRuleGroupOverride]
    Defines the rule group overrides to apply to the rule set.
    rule_set_action str | ManagedRuleSetActionType
    Defines the rule set action.
    ruleSetType String
    Defines the rule set type to use.
    ruleSetVersion String
    Defines the version of the rule set to use.
    exclusions List<Property Map>
    Describes the exclusions that are applied to all rules in the set.
    ruleGroupOverrides List<Property Map>
    Defines the rule group overrides to apply to the rule set.
    ruleSetAction String | "Block" | "Log" | "Redirect"
    Defines the rule set action.

    ManagedRuleSetActionType, ManagedRuleSetActionTypeArgs

    Block
    Block
    Log
    Log
    Redirect
    Redirect
    ManagedRuleSetActionTypeBlock
    Block
    ManagedRuleSetActionTypeLog
    Log
    ManagedRuleSetActionTypeRedirect
    Redirect
    Block
    Block
    Log
    Log
    Redirect
    Redirect
    Block
    Block
    Log
    Log
    Redirect
    Redirect
    BLOCK
    Block
    LOG
    Log
    REDIRECT
    Redirect
    "Block"
    Block
    "Log"
    Log
    "Redirect"
    Redirect

    ManagedRuleSetList, ManagedRuleSetListArgs

    ManagedRuleSetListResponse, ManagedRuleSetListResponseArgs

    ManagedRuleSetResponse, ManagedRuleSetResponseArgs

    RuleSetType string
    Defines the rule set type to use.
    RuleSetVersion string
    Defines the version of the rule set to use.
    Exclusions List<Pulumi.AzureNative.FrontDoor.Inputs.ManagedRuleExclusionResponse>
    Describes the exclusions that are applied to all rules in the set.
    RuleGroupOverrides List<Pulumi.AzureNative.FrontDoor.Inputs.ManagedRuleGroupOverrideResponse>
    Defines the rule group overrides to apply to the rule set.
    RuleSetAction string
    Defines the rule set action.
    RuleSetType string
    Defines the rule set type to use.
    RuleSetVersion string
    Defines the version of the rule set to use.
    Exclusions []ManagedRuleExclusionResponse
    Describes the exclusions that are applied to all rules in the set.
    RuleGroupOverrides []ManagedRuleGroupOverrideResponse
    Defines the rule group overrides to apply to the rule set.
    RuleSetAction string
    Defines the rule set action.
    ruleSetType String
    Defines the rule set type to use.
    ruleSetVersion String
    Defines the version of the rule set to use.
    exclusions List<ManagedRuleExclusionResponse>
    Describes the exclusions that are applied to all rules in the set.
    ruleGroupOverrides List<ManagedRuleGroupOverrideResponse>
    Defines the rule group overrides to apply to the rule set.
    ruleSetAction String
    Defines the rule set action.
    ruleSetType string
    Defines the rule set type to use.
    ruleSetVersion string
    Defines the version of the rule set to use.
    exclusions ManagedRuleExclusionResponse[]
    Describes the exclusions that are applied to all rules in the set.
    ruleGroupOverrides ManagedRuleGroupOverrideResponse[]
    Defines the rule group overrides to apply to the rule set.
    ruleSetAction string
    Defines the rule set action.
    rule_set_type str
    Defines the rule set type to use.
    rule_set_version str
    Defines the version of the rule set to use.
    exclusions Sequence[ManagedRuleExclusionResponse]
    Describes the exclusions that are applied to all rules in the set.
    rule_group_overrides Sequence[ManagedRuleGroupOverrideResponse]
    Defines the rule group overrides to apply to the rule set.
    rule_set_action str
    Defines the rule set action.
    ruleSetType String
    Defines the rule set type to use.
    ruleSetVersion String
    Defines the version of the rule set to use.
    exclusions List<Property Map>
    Describes the exclusions that are applied to all rules in the set.
    ruleGroupOverrides List<Property Map>
    Defines the rule group overrides to apply to the rule set.
    ruleSetAction String
    Defines the rule set action.

    MatchCondition, MatchConditionArgs

    MatchValue List<string>
    List of possible match values.
    MatchVariable string | Pulumi.AzureNative.FrontDoor.MatchVariable
    Request variable to compare with.
    Operator string | Pulumi.AzureNative.FrontDoor.Operator
    Comparison type to use for matching with the variable value.
    NegateCondition bool
    Describes if the result of this condition should be negated.
    Selector string
    Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
    Transforms List<Union<string, Pulumi.AzureNative.FrontDoor.TransformType>>
    List of transforms.
    MatchValue []string
    List of possible match values.
    MatchVariable string | MatchVariable
    Request variable to compare with.
    Operator string | Operator
    Comparison type to use for matching with the variable value.
    NegateCondition bool
    Describes if the result of this condition should be negated.
    Selector string
    Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
    Transforms []string
    List of transforms.
    matchValue List<String>
    List of possible match values.
    matchVariable String | MatchVariable
    Request variable to compare with.
    operator String | Operator
    Comparison type to use for matching with the variable value.
    negateCondition Boolean
    Describes if the result of this condition should be negated.
    selector String
    Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
    transforms List<Either<String,TransformType>>
    List of transforms.
    matchValue string[]
    List of possible match values.
    matchVariable string | MatchVariable
    Request variable to compare with.
    operator string | Operator
    Comparison type to use for matching with the variable value.
    negateCondition boolean
    Describes if the result of this condition should be negated.
    selector string
    Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
    transforms (string | TransformType)[]
    List of transforms.
    match_value Sequence[str]
    List of possible match values.
    match_variable str | MatchVariable
    Request variable to compare with.
    operator str | Operator
    Comparison type to use for matching with the variable value.
    negate_condition bool
    Describes if the result of this condition should be negated.
    selector str
    Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
    transforms Sequence[Union[str, TransformType]]
    List of transforms.
    matchValue List<String>
    List of possible match values.
    matchVariable String | "RemoteAddr" | "RequestMethod" | "QueryString" | "PostArgs" | "RequestUri" | "RequestHeader" | "RequestBody" | "Cookies" | "SocketAddr"
    Request variable to compare with.
    operator String | "Any" | "IPMatch" | "GeoMatch" | "Equal" | "Contains" | "LessThan" | "GreaterThan" | "LessThanOrEqual" | "GreaterThanOrEqual" | "BeginsWith" | "EndsWith" | "RegEx"
    Comparison type to use for matching with the variable value.
    negateCondition Boolean
    Describes if the result of this condition should be negated.
    selector String
    Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
    transforms List<String | "Lowercase" | "Uppercase" | "Trim" | "UrlDecode" | "UrlEncode" | "RemoveNulls">
    List of transforms.

    MatchConditionResponse, MatchConditionResponseArgs

    MatchValue List<string>
    List of possible match values.
    MatchVariable string
    Request variable to compare with.
    Operator string
    Comparison type to use for matching with the variable value.
    NegateCondition bool
    Describes if the result of this condition should be negated.
    Selector string
    Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
    Transforms List<string>
    List of transforms.
    MatchValue []string
    List of possible match values.
    MatchVariable string
    Request variable to compare with.
    Operator string
    Comparison type to use for matching with the variable value.
    NegateCondition bool
    Describes if the result of this condition should be negated.
    Selector string
    Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
    Transforms []string
    List of transforms.
    matchValue List<String>
    List of possible match values.
    matchVariable String
    Request variable to compare with.
    operator String
    Comparison type to use for matching with the variable value.
    negateCondition Boolean
    Describes if the result of this condition should be negated.
    selector String
    Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
    transforms List<String>
    List of transforms.
    matchValue string[]
    List of possible match values.
    matchVariable string
    Request variable to compare with.
    operator string
    Comparison type to use for matching with the variable value.
    negateCondition boolean
    Describes if the result of this condition should be negated.
    selector string
    Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
    transforms string[]
    List of transforms.
    match_value Sequence[str]
    List of possible match values.
    match_variable str
    Request variable to compare with.
    operator str
    Comparison type to use for matching with the variable value.
    negate_condition bool
    Describes if the result of this condition should be negated.
    selector str
    Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
    transforms Sequence[str]
    List of transforms.
    matchValue List<String>
    List of possible match values.
    matchVariable String
    Request variable to compare with.
    operator String
    Comparison type to use for matching with the variable value.
    negateCondition Boolean
    Describes if the result of this condition should be negated.
    selector String
    Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
    transforms List<String>
    List of transforms.

    MatchVariable, MatchVariableArgs

    RemoteAddr
    RemoteAddr
    RequestMethod
    RequestMethod
    QueryString
    QueryString
    PostArgs
    PostArgs
    RequestUri
    RequestUri
    RequestHeader
    RequestHeader
    RequestBody
    RequestBody
    Cookies
    Cookies
    SocketAddr
    SocketAddr
    MatchVariableRemoteAddr
    RemoteAddr
    MatchVariableRequestMethod
    RequestMethod
    MatchVariableQueryString
    QueryString
    MatchVariablePostArgs
    PostArgs
    MatchVariableRequestUri
    RequestUri
    MatchVariableRequestHeader
    RequestHeader
    MatchVariableRequestBody
    RequestBody
    MatchVariableCookies
    Cookies
    MatchVariableSocketAddr
    SocketAddr
    RemoteAddr
    RemoteAddr
    RequestMethod
    RequestMethod
    QueryString
    QueryString
    PostArgs
    PostArgs
    RequestUri
    RequestUri
    RequestHeader
    RequestHeader
    RequestBody
    RequestBody
    Cookies
    Cookies
    SocketAddr
    SocketAddr
    RemoteAddr
    RemoteAddr
    RequestMethod
    RequestMethod
    QueryString
    QueryString
    PostArgs
    PostArgs
    RequestUri
    RequestUri
    RequestHeader
    RequestHeader
    RequestBody
    RequestBody
    Cookies
    Cookies
    SocketAddr
    SocketAddr
    REMOTE_ADDR
    RemoteAddr
    REQUEST_METHOD
    RequestMethod
    QUERY_STRING
    QueryString
    POST_ARGS
    PostArgs
    REQUEST_URI
    RequestUri
    REQUEST_HEADER
    RequestHeader
    REQUEST_BODY
    RequestBody
    COOKIES
    Cookies
    SOCKET_ADDR
    SocketAddr
    "RemoteAddr"
    RemoteAddr
    "RequestMethod"
    RequestMethod
    "QueryString"
    QueryString
    "PostArgs"
    PostArgs
    "RequestUri"
    RequestUri
    "RequestHeader"
    RequestHeader
    "RequestBody"
    RequestBody
    "Cookies"
    Cookies
    "SocketAddr"
    SocketAddr

    Operator, OperatorArgs

    Any
    Any
    IPMatch
    IPMatch
    GeoMatch
    GeoMatch
    Equal
    Equal
    Contains
    Contains
    LessThan
    LessThan
    GreaterThan
    GreaterThan
    LessThanOrEqual
    LessThanOrEqual
    GreaterThanOrEqual
    GreaterThanOrEqual
    BeginsWith
    BeginsWith
    EndsWith
    EndsWith
    RegEx
    RegEx
    OperatorAny
    Any
    OperatorIPMatch
    IPMatch
    OperatorGeoMatch
    GeoMatch
    OperatorEqual
    Equal
    OperatorContains
    Contains
    OperatorLessThan
    LessThan
    OperatorGreaterThan
    GreaterThan
    OperatorLessThanOrEqual
    LessThanOrEqual
    OperatorGreaterThanOrEqual
    GreaterThanOrEqual
    OperatorBeginsWith
    BeginsWith
    OperatorEndsWith
    EndsWith
    OperatorRegEx
    RegEx
    Any
    Any
    IPMatch
    IPMatch
    GeoMatch
    GeoMatch
    Equal
    Equal
    Contains
    Contains
    LessThan
    LessThan
    GreaterThan
    GreaterThan
    LessThanOrEqual
    LessThanOrEqual
    GreaterThanOrEqual
    GreaterThanOrEqual
    BeginsWith
    BeginsWith
    EndsWith
    EndsWith
    RegEx
    RegEx
    Any
    Any
    IPMatch
    IPMatch
    GeoMatch
    GeoMatch
    Equal
    Equal
    Contains
    Contains
    LessThan
    LessThan
    GreaterThan
    GreaterThan
    LessThanOrEqual
    LessThanOrEqual
    GreaterThanOrEqual
    GreaterThanOrEqual
    BeginsWith
    BeginsWith
    EndsWith
    EndsWith
    RegEx
    RegEx
    ANY
    Any
    IP_MATCH
    IPMatch
    GEO_MATCH
    GeoMatch
    EQUAL
    Equal
    CONTAINS
    Contains
    LESS_THAN
    LessThan
    GREATER_THAN
    GreaterThan
    LESS_THAN_OR_EQUAL
    LessThanOrEqual
    GREATER_THAN_OR_EQUAL
    GreaterThanOrEqual
    BEGINS_WITH
    BeginsWith
    ENDS_WITH
    EndsWith
    REG_EX
    RegEx
    "Any"
    Any
    "IPMatch"
    IPMatch
    "GeoMatch"
    GeoMatch
    "Equal"
    Equal
    "Contains"
    Contains
    "LessThan"
    LessThan
    "GreaterThan"
    GreaterThan
    "LessThanOrEqual"
    LessThanOrEqual
    "GreaterThanOrEqual"
    GreaterThanOrEqual
    "BeginsWith"
    BeginsWith
    "EndsWith"
    EndsWith
    "RegEx"
    RegEx

    PolicyEnabledState, PolicyEnabledStateArgs

    Disabled
    Disabled
    Enabled
    Enabled
    PolicyEnabledStateDisabled
    Disabled
    PolicyEnabledStateEnabled
    Enabled
    Disabled
    Disabled
    Enabled
    Enabled
    Disabled
    Disabled
    Enabled
    Enabled
    DISABLED
    Disabled
    ENABLED
    Enabled
    "Disabled"
    Disabled
    "Enabled"
    Enabled

    PolicyMode, PolicyModeArgs

    Prevention
    Prevention
    Detection
    Detection
    PolicyModePrevention
    Prevention
    PolicyModeDetection
    Detection
    Prevention
    Prevention
    Detection
    Detection
    Prevention
    Prevention
    Detection
    Detection
    PREVENTION
    Prevention
    DETECTION
    Detection
    "Prevention"
    Prevention
    "Detection"
    Detection

    PolicyRequestBodyCheck, PolicyRequestBodyCheckArgs

    Disabled
    Disabled
    Enabled
    Enabled
    PolicyRequestBodyCheckDisabled
    Disabled
    PolicyRequestBodyCheckEnabled
    Enabled
    Disabled
    Disabled
    Enabled
    Enabled
    Disabled
    Disabled
    Enabled
    Enabled
    DISABLED
    Disabled
    ENABLED
    Enabled
    "Disabled"
    Disabled
    "Enabled"
    Enabled

    PolicySettings, PolicySettingsArgs

    CustomBlockResponseBody string
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    CustomBlockResponseStatusCode int
    If the action type is block, customer can override the response status code.
    EnabledState string | Pulumi.AzureNative.FrontDoor.PolicyEnabledState
    Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
    JavascriptChallengeExpirationInMinutes int
    Defines the JavaScript challenge cookie validity lifetime in minutes. This setting is only applicable to Premium_AzureFrontDoor. Value must be an integer between 5 and 1440 with the default value being 30.
    Mode string | Pulumi.AzureNative.FrontDoor.PolicyMode
    Describes if it is in detection mode or prevention mode at policy level.
    RedirectUrl string
    If action type is redirect, this field represents redirect URL for the client.
    RequestBodyCheck string | Pulumi.AzureNative.FrontDoor.PolicyRequestBodyCheck
    Describes if policy managed rules will inspect the request body content.
    ScrubbingRules List<Pulumi.AzureNative.FrontDoor.Inputs.WebApplicationFirewallScrubbingRules>
    List of log scrubbing rules applied to the Web Application Firewall logs.
    State string | Pulumi.AzureNative.FrontDoor.WebApplicationFirewallScrubbingState
    State of the log scrubbing config. Default value is Enabled.
    CustomBlockResponseBody string
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    CustomBlockResponseStatusCode int
    If the action type is block, customer can override the response status code.
    EnabledState string | PolicyEnabledState
    Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
    JavascriptChallengeExpirationInMinutes int
    Defines the JavaScript challenge cookie validity lifetime in minutes. This setting is only applicable to Premium_AzureFrontDoor. Value must be an integer between 5 and 1440 with the default value being 30.
    Mode string | PolicyMode
    Describes if it is in detection mode or prevention mode at policy level.
    RedirectUrl string
    If action type is redirect, this field represents redirect URL for the client.
    RequestBodyCheck string | PolicyRequestBodyCheck
    Describes if policy managed rules will inspect the request body content.
    ScrubbingRules []WebApplicationFirewallScrubbingRules
    List of log scrubbing rules applied to the Web Application Firewall logs.
    State string | WebApplicationFirewallScrubbingState
    State of the log scrubbing config. Default value is Enabled.
    customBlockResponseBody String
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    customBlockResponseStatusCode Integer
    If the action type is block, customer can override the response status code.
    enabledState String | PolicyEnabledState
    Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
    javascriptChallengeExpirationInMinutes Integer
    Defines the JavaScript challenge cookie validity lifetime in minutes. This setting is only applicable to Premium_AzureFrontDoor. Value must be an integer between 5 and 1440 with the default value being 30.
    mode String | PolicyMode
    Describes if it is in detection mode or prevention mode at policy level.
    redirectUrl String
    If action type is redirect, this field represents redirect URL for the client.
    requestBodyCheck String | PolicyRequestBodyCheck
    Describes if policy managed rules will inspect the request body content.
    scrubbingRules List<WebApplicationFirewallScrubbingRules>
    List of log scrubbing rules applied to the Web Application Firewall logs.
    state String | WebApplicationFirewallScrubbingState
    State of the log scrubbing config. Default value is Enabled.
    customBlockResponseBody string
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    customBlockResponseStatusCode number
    If the action type is block, customer can override the response status code.
    enabledState string | PolicyEnabledState
    Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
    javascriptChallengeExpirationInMinutes number
    Defines the JavaScript challenge cookie validity lifetime in minutes. This setting is only applicable to Premium_AzureFrontDoor. Value must be an integer between 5 and 1440 with the default value being 30.
    mode string | PolicyMode
    Describes if it is in detection mode or prevention mode at policy level.
    redirectUrl string
    If action type is redirect, this field represents redirect URL for the client.
    requestBodyCheck string | PolicyRequestBodyCheck
    Describes if policy managed rules will inspect the request body content.
    scrubbingRules WebApplicationFirewallScrubbingRules[]
    List of log scrubbing rules applied to the Web Application Firewall logs.
    state string | WebApplicationFirewallScrubbingState
    State of the log scrubbing config. Default value is Enabled.
    custom_block_response_body str
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    custom_block_response_status_code int
    If the action type is block, customer can override the response status code.
    enabled_state str | PolicyEnabledState
    Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
    javascript_challenge_expiration_in_minutes int
    Defines the JavaScript challenge cookie validity lifetime in minutes. This setting is only applicable to Premium_AzureFrontDoor. Value must be an integer between 5 and 1440 with the default value being 30.
    mode str | PolicyMode
    Describes if it is in detection mode or prevention mode at policy level.
    redirect_url str
    If action type is redirect, this field represents redirect URL for the client.
    request_body_check str | PolicyRequestBodyCheck
    Describes if policy managed rules will inspect the request body content.
    scrubbing_rules Sequence[WebApplicationFirewallScrubbingRules]
    List of log scrubbing rules applied to the Web Application Firewall logs.
    state str | WebApplicationFirewallScrubbingState
    State of the log scrubbing config. Default value is Enabled.
    customBlockResponseBody String
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    customBlockResponseStatusCode Number
    If the action type is block, customer can override the response status code.
    enabledState String | "Disabled" | "Enabled"
    Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
    javascriptChallengeExpirationInMinutes Number
    Defines the JavaScript challenge cookie validity lifetime in minutes. This setting is only applicable to Premium_AzureFrontDoor. Value must be an integer between 5 and 1440 with the default value being 30.
    mode String | "Prevention" | "Detection"
    Describes if it is in detection mode or prevention mode at policy level.
    redirectUrl String
    If action type is redirect, this field represents redirect URL for the client.
    requestBodyCheck String | "Disabled" | "Enabled"
    Describes if policy managed rules will inspect the request body content.
    scrubbingRules List<Property Map>
    List of log scrubbing rules applied to the Web Application Firewall logs.
    state String | "Enabled" | "Disabled"
    State of the log scrubbing config. Default value is Enabled.

    PolicySettingsResponse, PolicySettingsResponseArgs

    CustomBlockResponseBody string
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    CustomBlockResponseStatusCode int
    If the action type is block, customer can override the response status code.
    EnabledState string
    Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
    JavascriptChallengeExpirationInMinutes int
    Defines the JavaScript challenge cookie validity lifetime in minutes. This setting is only applicable to Premium_AzureFrontDoor. Value must be an integer between 5 and 1440 with the default value being 30.
    Mode string
    Describes if it is in detection mode or prevention mode at policy level.
    RedirectUrl string
    If action type is redirect, this field represents redirect URL for the client.
    RequestBodyCheck string
    Describes if policy managed rules will inspect the request body content.
    ScrubbingRules List<Pulumi.AzureNative.FrontDoor.Inputs.WebApplicationFirewallScrubbingRulesResponse>
    List of log scrubbing rules applied to the Web Application Firewall logs.
    State string
    State of the log scrubbing config. Default value is Enabled.
    CustomBlockResponseBody string
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    CustomBlockResponseStatusCode int
    If the action type is block, customer can override the response status code.
    EnabledState string
    Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
    JavascriptChallengeExpirationInMinutes int
    Defines the JavaScript challenge cookie validity lifetime in minutes. This setting is only applicable to Premium_AzureFrontDoor. Value must be an integer between 5 and 1440 with the default value being 30.
    Mode string
    Describes if it is in detection mode or prevention mode at policy level.
    RedirectUrl string
    If action type is redirect, this field represents redirect URL for the client.
    RequestBodyCheck string
    Describes if policy managed rules will inspect the request body content.
    ScrubbingRules []WebApplicationFirewallScrubbingRulesResponse
    List of log scrubbing rules applied to the Web Application Firewall logs.
    State string
    State of the log scrubbing config. Default value is Enabled.
    customBlockResponseBody String
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    customBlockResponseStatusCode Integer
    If the action type is block, customer can override the response status code.
    enabledState String
    Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
    javascriptChallengeExpirationInMinutes Integer
    Defines the JavaScript challenge cookie validity lifetime in minutes. This setting is only applicable to Premium_AzureFrontDoor. Value must be an integer between 5 and 1440 with the default value being 30.
    mode String
    Describes if it is in detection mode or prevention mode at policy level.
    redirectUrl String
    If action type is redirect, this field represents redirect URL for the client.
    requestBodyCheck String
    Describes if policy managed rules will inspect the request body content.
    scrubbingRules List<WebApplicationFirewallScrubbingRulesResponse>
    List of log scrubbing rules applied to the Web Application Firewall logs.
    state String
    State of the log scrubbing config. Default value is Enabled.
    customBlockResponseBody string
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    customBlockResponseStatusCode number
    If the action type is block, customer can override the response status code.
    enabledState string
    Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
    javascriptChallengeExpirationInMinutes number
    Defines the JavaScript challenge cookie validity lifetime in minutes. This setting is only applicable to Premium_AzureFrontDoor. Value must be an integer between 5 and 1440 with the default value being 30.
    mode string
    Describes if it is in detection mode or prevention mode at policy level.
    redirectUrl string
    If action type is redirect, this field represents redirect URL for the client.
    requestBodyCheck string
    Describes if policy managed rules will inspect the request body content.
    scrubbingRules WebApplicationFirewallScrubbingRulesResponse[]
    List of log scrubbing rules applied to the Web Application Firewall logs.
    state string
    State of the log scrubbing config. Default value is Enabled.
    custom_block_response_body str
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    custom_block_response_status_code int
    If the action type is block, customer can override the response status code.
    enabled_state str
    Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
    javascript_challenge_expiration_in_minutes int
    Defines the JavaScript challenge cookie validity lifetime in minutes. This setting is only applicable to Premium_AzureFrontDoor. Value must be an integer between 5 and 1440 with the default value being 30.
    mode str
    Describes if it is in detection mode or prevention mode at policy level.
    redirect_url str
    If action type is redirect, this field represents redirect URL for the client.
    request_body_check str
    Describes if policy managed rules will inspect the request body content.
    scrubbing_rules Sequence[WebApplicationFirewallScrubbingRulesResponse]
    List of log scrubbing rules applied to the Web Application Firewall logs.
    state str
    State of the log scrubbing config. Default value is Enabled.
    customBlockResponseBody String
    If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
    customBlockResponseStatusCode Number
    If the action type is block, customer can override the response status code.
    enabledState String
    Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
    javascriptChallengeExpirationInMinutes Number
    Defines the JavaScript challenge cookie validity lifetime in minutes. This setting is only applicable to Premium_AzureFrontDoor. Value must be an integer between 5 and 1440 with the default value being 30.
    mode String
    Describes if it is in detection mode or prevention mode at policy level.
    redirectUrl String
    If action type is redirect, this field represents redirect URL for the client.
    requestBodyCheck String
    Describes if policy managed rules will inspect the request body content.
    scrubbingRules List<Property Map>
    List of log scrubbing rules applied to the Web Application Firewall logs.
    state String
    State of the log scrubbing config. Default value is Enabled.

    RoutingRuleLinkResponse, RoutingRuleLinkResponseArgs

    Id string
    Resource ID.
    Id string
    Resource ID.
    id String
    Resource ID.
    id string
    Resource ID.
    id str
    Resource ID.
    id String
    Resource ID.

    RuleType, RuleTypeArgs

    MatchRule
    MatchRule
    RateLimitRule
    RateLimitRule
    RuleTypeMatchRule
    MatchRule
    RuleTypeRateLimitRule
    RateLimitRule
    MatchRule
    MatchRule
    RateLimitRule
    RateLimitRule
    MatchRule
    MatchRule
    RateLimitRule
    RateLimitRule
    MATCH_RULE
    MatchRule
    RATE_LIMIT_RULE
    RateLimitRule
    "MatchRule"
    MatchRule
    "RateLimitRule"
    RateLimitRule

    ScrubbingRuleEntryMatchOperator, ScrubbingRuleEntryMatchOperatorArgs

    EqualsAny
    EqualsAny
    EqualsValue
    Equals
    ScrubbingRuleEntryMatchOperatorEqualsAny
    EqualsAny
    ScrubbingRuleEntryMatchOperatorEquals
    Equals
    EqualsAny
    EqualsAny
    Equals
    Equals
    EqualsAny
    EqualsAny
    Equals
    Equals
    EQUALS_ANY
    EqualsAny
    EQUALS
    Equals
    "EqualsAny"
    EqualsAny
    "Equals"
    Equals

    ScrubbingRuleEntryMatchVariable, ScrubbingRuleEntryMatchVariableArgs

    RequestIPAddress
    RequestIPAddress
    RequestUri
    RequestUri
    QueryStringArgNames
    QueryStringArgNames
    RequestHeaderNames
    RequestHeaderNames
    RequestCookieNames
    RequestCookieNames
    RequestBodyPostArgNames
    RequestBodyPostArgNames
    RequestBodyJsonArgNames
    RequestBodyJsonArgNames
    ScrubbingRuleEntryMatchVariableRequestIPAddress
    RequestIPAddress
    ScrubbingRuleEntryMatchVariableRequestUri
    RequestUri
    ScrubbingRuleEntryMatchVariableQueryStringArgNames
    QueryStringArgNames
    ScrubbingRuleEntryMatchVariableRequestHeaderNames
    RequestHeaderNames
    ScrubbingRuleEntryMatchVariableRequestCookieNames
    RequestCookieNames
    ScrubbingRuleEntryMatchVariableRequestBodyPostArgNames
    RequestBodyPostArgNames
    ScrubbingRuleEntryMatchVariableRequestBodyJsonArgNames
    RequestBodyJsonArgNames
    RequestIPAddress
    RequestIPAddress
    RequestUri
    RequestUri
    QueryStringArgNames
    QueryStringArgNames
    RequestHeaderNames
    RequestHeaderNames
    RequestCookieNames
    RequestCookieNames
    RequestBodyPostArgNames
    RequestBodyPostArgNames
    RequestBodyJsonArgNames
    RequestBodyJsonArgNames
    RequestIPAddress
    RequestIPAddress
    RequestUri
    RequestUri
    QueryStringArgNames
    QueryStringArgNames
    RequestHeaderNames
    RequestHeaderNames
    RequestCookieNames
    RequestCookieNames
    RequestBodyPostArgNames
    RequestBodyPostArgNames
    RequestBodyJsonArgNames
    RequestBodyJsonArgNames
    REQUEST_IP_ADDRESS
    RequestIPAddress
    REQUEST_URI
    RequestUri
    QUERY_STRING_ARG_NAMES
    QueryStringArgNames
    REQUEST_HEADER_NAMES
    RequestHeaderNames
    REQUEST_COOKIE_NAMES
    RequestCookieNames
    REQUEST_BODY_POST_ARG_NAMES
    RequestBodyPostArgNames
    REQUEST_BODY_JSON_ARG_NAMES
    RequestBodyJsonArgNames
    "RequestIPAddress"
    RequestIPAddress
    "RequestUri"
    RequestUri
    "QueryStringArgNames"
    QueryStringArgNames
    "RequestHeaderNames"
    RequestHeaderNames
    "RequestCookieNames"
    RequestCookieNames
    "RequestBodyPostArgNames"
    RequestBodyPostArgNames
    "RequestBodyJsonArgNames"
    RequestBodyJsonArgNames

    ScrubbingRuleEntryState, ScrubbingRuleEntryStateArgs

    Enabled
    Enabled
    Disabled
    Disabled
    ScrubbingRuleEntryStateEnabled
    Enabled
    ScrubbingRuleEntryStateDisabled
    Disabled
    Enabled
    Enabled
    Disabled
    Disabled
    Enabled
    Enabled
    Disabled
    Disabled
    ENABLED
    Enabled
    DISABLED
    Disabled
    "Enabled"
    Enabled
    "Disabled"
    Disabled

    SecurityPolicyLinkResponse, SecurityPolicyLinkResponseArgs

    Id string
    Resource ID.
    Id string
    Resource ID.
    id String
    Resource ID.
    id string
    Resource ID.
    id str
    Resource ID.
    id String
    Resource ID.

    Sku, SkuArgs

    Name string | Pulumi.AzureNative.FrontDoor.SkuName
    Name of the pricing tier.
    Name string | SkuName
    Name of the pricing tier.
    name String | SkuName
    Name of the pricing tier.
    name string | SkuName
    Name of the pricing tier.
    name str | SkuName
    Name of the pricing tier.

    SkuName, SkuNameArgs

    Classic_AzureFrontDoor
    Classic_AzureFrontDoor
    Standard_AzureFrontDoor
    Standard_AzureFrontDoor
    Premium_AzureFrontDoor
    Premium_AzureFrontDoor
    SkuName_Classic_AzureFrontDoor
    Classic_AzureFrontDoor
    SkuName_Standard_AzureFrontDoor
    Standard_AzureFrontDoor
    SkuName_Premium_AzureFrontDoor
    Premium_AzureFrontDoor
    Classic_AzureFrontDoor
    Classic_AzureFrontDoor
    Standard_AzureFrontDoor
    Standard_AzureFrontDoor
    Premium_AzureFrontDoor
    Premium_AzureFrontDoor
    Classic_AzureFrontDoor
    Classic_AzureFrontDoor
    Standard_AzureFrontDoor
    Standard_AzureFrontDoor
    Premium_AzureFrontDoor
    Premium_AzureFrontDoor
    CLASSIC_AZURE_FRONT_DOOR
    Classic_AzureFrontDoor
    STANDARD_AZURE_FRONT_DOOR
    Standard_AzureFrontDoor
    PREMIUM_AZURE_FRONT_DOOR
    Premium_AzureFrontDoor
    "Classic_AzureFrontDoor"
    Classic_AzureFrontDoor
    "Standard_AzureFrontDoor"
    Standard_AzureFrontDoor
    "Premium_AzureFrontDoor"
    Premium_AzureFrontDoor

    SkuResponse, SkuResponseArgs

    Name string
    Name of the pricing tier.
    Name string
    Name of the pricing tier.
    name String
    Name of the pricing tier.
    name string
    Name of the pricing tier.
    name str
    Name of the pricing tier.
    name String
    Name of the pricing tier.

    TransformType, TransformTypeArgs

    Lowercase
    Lowercase
    Uppercase
    Uppercase
    Trim
    Trim
    UrlDecode
    UrlDecode
    UrlEncode
    UrlEncode
    RemoveNulls
    RemoveNulls
    TransformTypeLowercase
    Lowercase
    TransformTypeUppercase
    Uppercase
    TransformTypeTrim
    Trim
    TransformTypeUrlDecode
    UrlDecode
    TransformTypeUrlEncode
    UrlEncode
    TransformTypeRemoveNulls
    RemoveNulls
    Lowercase
    Lowercase
    Uppercase
    Uppercase
    Trim
    Trim
    UrlDecode
    UrlDecode
    UrlEncode
    UrlEncode
    RemoveNulls
    RemoveNulls
    Lowercase
    Lowercase
    Uppercase
    Uppercase
    Trim
    Trim
    UrlDecode
    UrlDecode
    UrlEncode
    UrlEncode
    RemoveNulls
    RemoveNulls
    LOWERCASE
    Lowercase
    UPPERCASE
    Uppercase
    TRIM
    Trim
    URL_DECODE
    UrlDecode
    URL_ENCODE
    UrlEncode
    REMOVE_NULLS
    RemoveNulls
    "Lowercase"
    Lowercase
    "Uppercase"
    Uppercase
    "Trim"
    Trim
    "UrlDecode"
    UrlDecode
    "UrlEncode"
    UrlEncode
    "RemoveNulls"
    RemoveNulls

    VariableName, VariableNameArgs

    SocketAddr
    SocketAddr
    GeoLocation
    GeoLocation
    None
    None
    VariableNameSocketAddr
    SocketAddr
    VariableNameGeoLocation
    GeoLocation
    VariableNameNone
    None
    SocketAddr
    SocketAddr
    GeoLocation
    GeoLocation
    None
    None
    SocketAddr
    SocketAddr
    GeoLocation
    GeoLocation
    None
    None
    SOCKET_ADDR
    SocketAddr
    GEO_LOCATION
    GeoLocation
    NONE
    None
    "SocketAddr"
    SocketAddr
    "GeoLocation"
    GeoLocation
    "None"
    None

    WebApplicationFirewallScrubbingRules, WebApplicationFirewallScrubbingRulesArgs

    MatchVariable string | Pulumi.AzureNative.FrontDoor.ScrubbingRuleEntryMatchVariable
    The variable to be scrubbed from the logs.
    SelectorMatchOperator string | Pulumi.AzureNative.FrontDoor.ScrubbingRuleEntryMatchOperator
    When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.
    Selector string
    When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
    State string | Pulumi.AzureNative.FrontDoor.ScrubbingRuleEntryState
    Defines the state of a log scrubbing rule. Default value is enabled.
    MatchVariable string | ScrubbingRuleEntryMatchVariable
    The variable to be scrubbed from the logs.
    SelectorMatchOperator string | ScrubbingRuleEntryMatchOperator
    When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.
    Selector string
    When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
    State string | ScrubbingRuleEntryState
    Defines the state of a log scrubbing rule. Default value is enabled.
    matchVariable String | ScrubbingRuleEntryMatchVariable
    The variable to be scrubbed from the logs.
    selectorMatchOperator String | ScrubbingRuleEntryMatchOperator
    When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.
    selector String
    When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
    state String | ScrubbingRuleEntryState
    Defines the state of a log scrubbing rule. Default value is enabled.
    matchVariable string | ScrubbingRuleEntryMatchVariable
    The variable to be scrubbed from the logs.
    selectorMatchOperator string | ScrubbingRuleEntryMatchOperator
    When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.
    selector string
    When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
    state string | ScrubbingRuleEntryState
    Defines the state of a log scrubbing rule. Default value is enabled.
    match_variable str | ScrubbingRuleEntryMatchVariable
    The variable to be scrubbed from the logs.
    selector_match_operator str | ScrubbingRuleEntryMatchOperator
    When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.
    selector str
    When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
    state str | ScrubbingRuleEntryState
    Defines the state of a log scrubbing rule. Default value is enabled.
    matchVariable String | "RequestIPAddress" | "RequestUri" | "QueryStringArgNames" | "RequestHeaderNames" | "RequestCookieNames" | "RequestBodyPostArgNames" | "RequestBodyJsonArgNames"
    The variable to be scrubbed from the logs.
    selectorMatchOperator String | "EqualsAny" | "Equals"
    When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.
    selector String
    When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
    state String | "Enabled" | "Disabled"
    Defines the state of a log scrubbing rule. Default value is enabled.

    WebApplicationFirewallScrubbingRulesResponse, WebApplicationFirewallScrubbingRulesResponseArgs

    MatchVariable string
    The variable to be scrubbed from the logs.
    SelectorMatchOperator string
    When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.
    Selector string
    When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
    State string
    Defines the state of a log scrubbing rule. Default value is enabled.
    MatchVariable string
    The variable to be scrubbed from the logs.
    SelectorMatchOperator string
    When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.
    Selector string
    When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
    State string
    Defines the state of a log scrubbing rule. Default value is enabled.
    matchVariable String
    The variable to be scrubbed from the logs.
    selectorMatchOperator String
    When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.
    selector String
    When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
    state String
    Defines the state of a log scrubbing rule. Default value is enabled.
    matchVariable string
    The variable to be scrubbed from the logs.
    selectorMatchOperator string
    When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.
    selector string
    When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
    state string
    Defines the state of a log scrubbing rule. Default value is enabled.
    match_variable str
    The variable to be scrubbed from the logs.
    selector_match_operator str
    When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.
    selector str
    When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
    state str
    Defines the state of a log scrubbing rule. Default value is enabled.
    matchVariable String
    The variable to be scrubbed from the logs.
    selectorMatchOperator String
    When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.
    selector String
    When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
    state String
    Defines the state of a log scrubbing rule. Default value is enabled.

    WebApplicationFirewallScrubbingState, WebApplicationFirewallScrubbingStateArgs

    Enabled
    Enabled
    Disabled
    Disabled
    WebApplicationFirewallScrubbingStateEnabled
    Enabled
    WebApplicationFirewallScrubbingStateDisabled
    Disabled
    Enabled
    Enabled
    Disabled
    Disabled
    Enabled
    Enabled
    Disabled
    Disabled
    ENABLED
    Enabled
    DISABLED
    Disabled
    "Enabled"
    Enabled
    "Disabled"
    Disabled

    Import

    An existing resource can be imported using its type token, name, and identifier, e.g.

    $ pulumi import azure-native:frontdoor:Policy Policy1 /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/FrontDoorWebApplicationFirewallPolicies/{policyName}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Azure Native pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native logo
    This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
    Azure Native v3.3.0 published on Monday, Apr 28, 2025 by Pulumi
    pulumi/pulumi-azure-native