Azure Native v1 v1.104.0, Jul 6 23

These are the docs for Azure Native v1. We recommenend using the latest version, Azure Native v2.

Azure Native v1 v1.104.0 published on Thursday, Jul 6, 2023 by Pulumi

pulumi/pulumi-azure-native

azure-native.network.Policy

Explore with Pulumi AI

These are the docs for Azure Native v1. We recommenend using the latest version, Azure Native v2.

Azure Native v1 v1.104.0 published on Thursday, Jul 6, 2023 by Pulumi

pulumi/pulumi-azure-native

Example Usage

Creates specific policy

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var policy = new AzureNative.Network.Policy("policy", new()
    {
        CustomRules = new AzureNative.Network.Inputs.CustomRuleListArgs
        {
            Rules = new[]
            {
                new AzureNative.Network.Inputs.CustomRuleArgs
                {
                    Action = "Block",
                    MatchConditions = new[]
                    {
                        new AzureNative.Network.Inputs.FrontDoorMatchConditionArgs
                        {
                            MatchValue = new[]
                            {
                                "192.168.1.0/24",
                                "10.0.0.0/24",
                            },
                            MatchVariable = "RemoteAddr",
                            Operator = "IPMatch",
                        },
                    },
                    Name = "Rule1",
                    Priority = 1,
                    RateLimitThreshold = 1000,
                    RuleType = "RateLimitRule",
                },
                new AzureNative.Network.Inputs.CustomRuleArgs
                {
                    Action = "Block",
                    MatchConditions = new[]
                    {
                        new AzureNative.Network.Inputs.FrontDoorMatchConditionArgs
                        {
                            MatchValue = new[]
                            {
                                "CH",
                            },
                            MatchVariable = "RemoteAddr",
                            Operator = "GeoMatch",
                        },
                        new AzureNative.Network.Inputs.FrontDoorMatchConditionArgs
                        {
                            MatchValue = new[]
                            {
                                "windows",
                            },
                            MatchVariable = "RequestHeader",
                            Operator = "Contains",
                            Selector = "UserAgent",
                            Transforms = new[]
                            {
                                "Lowercase",
                            },
                        },
                    },
                    Name = "Rule2",
                    Priority = 2,
                    RuleType = "MatchRule",
                },
            },
        },
        ManagedRules = new AzureNative.Network.Inputs.ManagedRuleSetListArgs
        {
            ManagedRuleSets = new[]
            {
                new AzureNative.Network.Inputs.FrontDoorManagedRuleSetArgs
                {
                    Exclusions = new[]
                    {
                        new AzureNative.Network.Inputs.ManagedRuleExclusionArgs
                        {
                            MatchVariable = "RequestHeaderNames",
                            Selector = "User-Agent",
                            SelectorMatchOperator = "Equals",
                        },
                    },
                    RuleGroupOverrides = new[]
                    {
                        new AzureNative.Network.Inputs.FrontDoorManagedRuleGroupOverrideArgs
                        {
                            Exclusions = new[]
                            {
                                new AzureNative.Network.Inputs.ManagedRuleExclusionArgs
                                {
                                    MatchVariable = "RequestCookieNames",
                                    Selector = "token",
                                    SelectorMatchOperator = "StartsWith",
                                },
                            },
                            RuleGroupName = "SQLI",
                            Rules = new[]
                            {
                                new AzureNative.Network.Inputs.FrontDoorManagedRuleOverrideArgs
                                {
                                    Action = "Redirect",
                                    EnabledState = "Enabled",
                                    Exclusions = new[]
                                    {
                                        new AzureNative.Network.Inputs.ManagedRuleExclusionArgs
                                        {
                                            MatchVariable = "QueryStringArgNames",
                                            Selector = "query",
                                            SelectorMatchOperator = "Equals",
                                        },
                                    },
                                    RuleId = "942100",
                                },
                                new AzureNative.Network.Inputs.FrontDoorManagedRuleOverrideArgs
                                {
                                    EnabledState = "Disabled",
                                    RuleId = "942110",
                                },
                            },
                        },
                    },
                    RuleSetAction = "Block",
                    RuleSetType = "DefaultRuleSet",
                    RuleSetVersion = "1.0",
                },
            },
        },
        PolicyName = "Policy1",
        PolicySettings = new AzureNative.Network.Inputs.FrontDoorPolicySettingsArgs
        {
            CustomBlockResponseBody = "PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==",
            CustomBlockResponseStatusCode = 499,
            EnabledState = "Enabled",
            Mode = "Prevention",
            RedirectUrl = "http://www.bing.com",
            RequestBodyCheck = "Disabled",
        },
        ResourceGroupName = "rg1",
        Sku = new AzureNative.Network.Inputs.SkuArgs
        {
            Name = "Classic_AzureFrontDoor",
        },
    });

});

Coming soon!

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.network.Policy;
import com.pulumi.azurenative.network.PolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var policy = new Policy("policy", PolicyArgs.builder()        
            .customRules(Map.of("rules",             
                Map.ofEntries(
                    Map.entry("action", "Block"),
                    Map.entry("matchConditions", Map.ofEntries(
                        Map.entry("matchValue",                         
                            "192.168.1.0/24",
                            "10.0.0.0/24"),
                        Map.entry("matchVariable", "RemoteAddr"),
                        Map.entry("operator", "IPMatch")
                    )),
                    Map.entry("name", "Rule1"),
                    Map.entry("priority", 1),
                    Map.entry("rateLimitThreshold", 1000),
                    Map.entry("ruleType", "RateLimitRule")
                ),
                Map.ofEntries(
                    Map.entry("action", "Block"),
                    Map.entry("matchConditions",                     
                        Map.ofEntries(
                            Map.entry("matchValue", "CH"),
                            Map.entry("matchVariable", "RemoteAddr"),
                            Map.entry("operator", "GeoMatch")
                        ),
                        Map.ofEntries(
                            Map.entry("matchValue", "windows"),
                            Map.entry("matchVariable", "RequestHeader"),
                            Map.entry("operator", "Contains"),
                            Map.entry("selector", "UserAgent"),
                            Map.entry("transforms", "Lowercase")
                        )),
                    Map.entry("name", "Rule2"),
                    Map.entry("priority", 2),
                    Map.entry("ruleType", "MatchRule")
                )))
            .managedRules(Map.of("managedRuleSets", Map.ofEntries(
                Map.entry("exclusions", Map.ofEntries(
                    Map.entry("matchVariable", "RequestHeaderNames"),
                    Map.entry("selector", "User-Agent"),
                    Map.entry("selectorMatchOperator", "Equals")
                )),
                Map.entry("ruleGroupOverrides", Map.ofEntries(
                    Map.entry("exclusions", Map.ofEntries(
                        Map.entry("matchVariable", "RequestCookieNames"),
                        Map.entry("selector", "token"),
                        Map.entry("selectorMatchOperator", "StartsWith")
                    )),
                    Map.entry("ruleGroupName", "SQLI"),
                    Map.entry("rules",                     
                        Map.ofEntries(
                            Map.entry("action", "Redirect"),
                            Map.entry("enabledState", "Enabled"),
                            Map.entry("exclusions", Map.ofEntries(
                                Map.entry("matchVariable", "QueryStringArgNames"),
                                Map.entry("selector", "query"),
                                Map.entry("selectorMatchOperator", "Equals")
                            )),
                            Map.entry("ruleId", "942100")
                        ),
                        Map.ofEntries(
                            Map.entry("enabledState", "Disabled"),
                            Map.entry("ruleId", "942110")
                        ))
                )),
                Map.entry("ruleSetAction", "Block"),
                Map.entry("ruleSetType", "DefaultRuleSet"),
                Map.entry("ruleSetVersion", "1.0")
            )))
            .policyName("Policy1")
            .policySettings(Map.ofEntries(
                Map.entry("customBlockResponseBody", "PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg=="),
                Map.entry("customBlockResponseStatusCode", 499),
                Map.entry("enabledState", "Enabled"),
                Map.entry("mode", "Prevention"),
                Map.entry("redirectUrl", "http://www.bing.com"),
                Map.entry("requestBodyCheck", "Disabled")
            ))
            .resourceGroupName("rg1")
            .sku(Map.of("name", "Classic_AzureFrontDoor"))
            .build());

    }
}

import pulumi
import pulumi_azure_native as azure_native

policy = azure_native.network.Policy("policy",
    custom_rules=azure_native.network.CustomRuleListResponseArgs(
        rules=[
            {
                "action": "Block",
                "matchConditions": [azure_native.network.FrontDoorMatchConditionArgs(
                    match_value=[
                        "192.168.1.0/24",
                        "10.0.0.0/24",
                    ],
                    match_variable="RemoteAddr",
                    operator="IPMatch",
                )],
                "name": "Rule1",
                "priority": 1,
                "rateLimitThreshold": 1000,
                "ruleType": "RateLimitRule",
            },
            {
                "action": "Block",
                "matchConditions": [
                    azure_native.network.FrontDoorMatchConditionArgs(
                        match_value=["CH"],
                        match_variable="RemoteAddr",
                        operator="GeoMatch",
                    ),
                    azure_native.network.FrontDoorMatchConditionArgs(
                        match_value=["windows"],
                        match_variable="RequestHeader",
                        operator="Contains",
                        selector="UserAgent",
                        transforms=["Lowercase"],
                    ),
                ],
                "name": "Rule2",
                "priority": 2,
                "ruleType": "MatchRule",
            },
        ],
    ),
    managed_rules=azure_native.network.ManagedRuleSetListResponseArgs(
        managed_rule_sets=[{
            "exclusions": [azure_native.network.ManagedRuleExclusionArgs(
                match_variable="RequestHeaderNames",
                selector="User-Agent",
                selector_match_operator="Equals",
            )],
            "ruleGroupOverrides": [{
                "exclusions": [azure_native.network.ManagedRuleExclusionArgs(
                    match_variable="RequestCookieNames",
                    selector="token",
                    selector_match_operator="StartsWith",
                )],
                "ruleGroupName": "SQLI",
                "rules": [
                    {
                        "action": "Redirect",
                        "enabledState": "Enabled",
                        "exclusions": [azure_native.network.ManagedRuleExclusionArgs(
                            match_variable="QueryStringArgNames",
                            selector="query",
                            selector_match_operator="Equals",
                        )],
                        "ruleId": "942100",
                    },
                    azure_native.network.FrontDoorManagedRuleOverrideArgs(
                        enabled_state="Disabled",
                        rule_id="942110",
                    ),
                ],
            }],
            "ruleSetAction": "Block",
            "ruleSetType": "DefaultRuleSet",
            "ruleSetVersion": "1.0",
        }],
    ),
    policy_name="Policy1",
    policy_settings=azure_native.network.FrontDoorPolicySettingsArgs(
        custom_block_response_body="PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==",
        custom_block_response_status_code=499,
        enabled_state="Enabled",
        mode="Prevention",
        redirect_url="http://www.bing.com",
        request_body_check="Disabled",
    ),
    resource_group_name="rg1",
    sku=azure_native.network.SkuArgs(
        name="Classic_AzureFrontDoor",
    ))

import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const policy = new azure_native.network.Policy("policy", {
    customRules: {
        rules: [
            {
                action: "Block",
                matchConditions: [{
                    matchValue: [
                        "192.168.1.0/24",
                        "10.0.0.0/24",
                    ],
                    matchVariable: "RemoteAddr",
                    operator: "IPMatch",
                }],
                name: "Rule1",
                priority: 1,
                rateLimitThreshold: 1000,
                ruleType: "RateLimitRule",
            },
            {
                action: "Block",
                matchConditions: [
                    {
                        matchValue: ["CH"],
                        matchVariable: "RemoteAddr",
                        operator: "GeoMatch",
                    },
                    {
                        matchValue: ["windows"],
                        matchVariable: "RequestHeader",
                        operator: "Contains",
                        selector: "UserAgent",
                        transforms: ["Lowercase"],
                    },
                ],
                name: "Rule2",
                priority: 2,
                ruleType: "MatchRule",
            },
        ],
    },
    managedRules: {
        managedRuleSets: [{
            exclusions: [{
                matchVariable: "RequestHeaderNames",
                selector: "User-Agent",
                selectorMatchOperator: "Equals",
            }],
            ruleGroupOverrides: [{
                exclusions: [{
                    matchVariable: "RequestCookieNames",
                    selector: "token",
                    selectorMatchOperator: "StartsWith",
                }],
                ruleGroupName: "SQLI",
                rules: [
                    {
                        action: "Redirect",
                        enabledState: "Enabled",
                        exclusions: [{
                            matchVariable: "QueryStringArgNames",
                            selector: "query",
                            selectorMatchOperator: "Equals",
                        }],
                        ruleId: "942100",
                    },
                    {
                        enabledState: "Disabled",
                        ruleId: "942110",
                    },
                ],
            }],
            ruleSetAction: "Block",
            ruleSetType: "DefaultRuleSet",
            ruleSetVersion: "1.0",
        }],
    },
    policyName: "Policy1",
    policySettings: {
        customBlockResponseBody: "PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==",
        customBlockResponseStatusCode: 499,
        enabledState: "Enabled",
        mode: "Prevention",
        redirectUrl: "http://www.bing.com",
        requestBodyCheck: "Disabled",
    },
    resourceGroupName: "rg1",
    sku: {
        name: "Classic_AzureFrontDoor",
    },
});

resources:
  policy:
    type: azure-native:network:Policy
    properties:
      customRules:
        rules:
          - action: Block
            matchConditions:
              - matchValue:
                  - 192.168.1.0/24
                  - 10.0.0.0/24
                matchVariable: RemoteAddr
                operator: IPMatch
            name: Rule1
            priority: 1
            rateLimitThreshold: 1000
            ruleType: RateLimitRule
          - action: Block
            matchConditions:
              - matchValue:
                  - CH
                matchVariable: RemoteAddr
                operator: GeoMatch
              - matchValue:
                  - windows
                matchVariable: RequestHeader
                operator: Contains
                selector: UserAgent
                transforms:
                  - Lowercase
            name: Rule2
            priority: 2
            ruleType: MatchRule
      managedRules:
        managedRuleSets:
          - exclusions:
              - matchVariable: RequestHeaderNames
                selector: User-Agent
                selectorMatchOperator: Equals
            ruleGroupOverrides:
              - exclusions:
                  - matchVariable: RequestCookieNames
                    selector: token
                    selectorMatchOperator: StartsWith
                ruleGroupName: SQLI
                rules:
                  - action: Redirect
                    enabledState: Enabled
                    exclusions:
                      - matchVariable: QueryStringArgNames
                        selector: query
                        selectorMatchOperator: Equals
                    ruleId: '942100'
                  - enabledState: Disabled
                    ruleId: '942110'
            ruleSetAction: Block
            ruleSetType: DefaultRuleSet
            ruleSetVersion: '1.0'
      policyName: Policy1
      policySettings:
        customBlockResponseBody: PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==
        customBlockResponseStatusCode: 499
        enabledState: Enabled
        mode: Prevention
        redirectUrl: http://www.bing.com
        requestBodyCheck: Disabled
      resourceGroupName: rg1
      sku:
        name: Classic_AzureFrontDoor

Create Policy Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Policy(name: string, args: PolicyArgs, opts?: CustomResourceOptions);

@overload
def Policy(resource_name: str,
           args: PolicyArgs,
           opts: Optional[ResourceOptions] = None)

@overload
def Policy(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           resource_group_name: Optional[str] = None,
           custom_rules: Optional[CustomRuleListArgs] = None,
           location: Optional[str] = None,
           managed_rules: Optional[ManagedRuleSetListArgs] = None,
           policy_name: Optional[str] = None,
           policy_settings: Optional[FrontDoorPolicySettingsArgs] = None,
           sku: Optional[SkuArgs] = None,
           tags: Optional[Mapping[str, str]] = None)

func NewPolicy(ctx *Context, name string, args PolicyArgs, opts ...ResourceOption) (*Policy, error)

public Policy(string name, PolicyArgs args, CustomResourceOptions? opts = null)

public Policy(String name, PolicyArgs args)
public Policy(String name, PolicyArgs args, CustomResourceOptions options)

type: azure-native:network:Policy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args PolicyArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args PolicyArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args PolicyArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args PolicyArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args PolicyArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var examplepolicyResourceResourceFromNetwork = new AzureNative.Network.Policy("examplepolicyResourceResourceFromNetwork", new()
{
    ResourceGroupName = "string",
    CustomRules = 
    {
        { "rules", new[]
        {
            
            {
                { "action", "string" },
                { "matchConditions", new[]
                {
                    
                    {
                        { "matchValue", new[]
                        {
                            "string",
                        } },
                        { "matchVariable", "string" },
                        { "operator", "string" },
                        { "negateCondition", false },
                        { "selector", "string" },
                        { "transforms", new[]
                        {
                            "string",
                        } },
                    },
                } },
                { "priority", 0 },
                { "ruleType", "string" },
                { "enabledState", "string" },
                { "name", "string" },
                { "rateLimitDurationInMinutes", 0 },
                { "rateLimitThreshold", 0 },
            },
        } },
    },
    Location = "string",
    ManagedRules = 
    {
        { "managedRuleSets", new[]
        {
            
            {
                { "ruleSetType", "string" },
                { "ruleSetVersion", "string" },
                { "exclusions", new[]
                {
                    
                    {
                        { "matchVariable", "string" },
                        { "selector", "string" },
                        { "selectorMatchOperator", "string" },
                    },
                } },
                { "ruleGroupOverrides", new[]
                {
                    
                    {
                        { "ruleGroupName", "string" },
                        { "exclusions", new[]
                        {
                            
                            {
                                { "matchVariable", "string" },
                                { "selector", "string" },
                                { "selectorMatchOperator", "string" },
                            },
                        } },
                        { "rules", new[]
                        {
                            
                            {
                                { "ruleId", "string" },
                                { "action", "string" },
                                { "enabledState", "string" },
                                { "exclusions", new[]
                                {
                                    
                                    {
                                        { "matchVariable", "string" },
                                        { "selector", "string" },
                                        { "selectorMatchOperator", "string" },
                                    },
                                } },
                            },
                        } },
                    },
                } },
                { "ruleSetAction", "string" },
            },
        } },
    },
    PolicyName = "string",
    PolicySettings = 
    {
        { "customBlockResponseBody", "string" },
        { "customBlockResponseStatusCode", 0 },
        { "enabledState", "string" },
        { "mode", "string" },
        { "redirectUrl", "string" },
        { "requestBodyCheck", "string" },
    },
    Sku = 
    {
        { "name", "string" },
    },
    Tags = 
    {
        { "string", "string" },
    },
});

example, err := network.NewPolicy(ctx, "examplepolicyResourceResourceFromNetwork", &network.PolicyArgs{
	ResourceGroupName: "string",
	CustomRules: map[string]interface{}{
		"rules": []map[string]interface{}{
			map[string]interface{}{
				"action": "string",
				"matchConditions": []map[string]interface{}{
					map[string]interface{}{
						"matchValue": []string{
							"string",
						},
						"matchVariable":   "string",
						"operator":        "string",
						"negateCondition": false,
						"selector":        "string",
						"transforms": []string{
							"string",
						},
					},
				},
				"priority":                   0,
				"ruleType":                   "string",
				"enabledState":               "string",
				"name":                       "string",
				"rateLimitDurationInMinutes": 0,
				"rateLimitThreshold":         0,
			},
		},
	},
	Location: "string",
	ManagedRules: map[string]interface{}{
		"managedRuleSets": []map[string]interface{}{
			map[string]interface{}{
				"ruleSetType":    "string",
				"ruleSetVersion": "string",
				"exclusions": []map[string]interface{}{
					map[string]interface{}{
						"matchVariable":         "string",
						"selector":              "string",
						"selectorMatchOperator": "string",
					},
				},
				"ruleGroupOverrides": []map[string]interface{}{
					map[string]interface{}{
						"ruleGroupName": "string",
						"exclusions": []map[string]interface{}{
							map[string]interface{}{
								"matchVariable":         "string",
								"selector":              "string",
								"selectorMatchOperator": "string",
							},
						},
						"rules": []map[string]interface{}{
							map[string]interface{}{
								"ruleId":       "string",
								"action":       "string",
								"enabledState": "string",
								"exclusions": []map[string]interface{}{
									map[string]interface{}{
										"matchVariable":         "string",
										"selector":              "string",
										"selectorMatchOperator": "string",
									},
								},
							},
						},
					},
				},
				"ruleSetAction": "string",
			},
		},
	},
	PolicyName: "string",
	PolicySettings: map[string]interface{}{
		"customBlockResponseBody":       "string",
		"customBlockResponseStatusCode": 0,
		"enabledState":                  "string",
		"mode":                          "string",
		"redirectUrl":                   "string",
		"requestBodyCheck":              "string",
	},
	Sku: map[string]interface{}{
		"name": "string",
	},
	Tags: map[string]interface{}{
		"string": "string",
	},
})

var examplepolicyResourceResourceFromNetwork = new Policy("examplepolicyResourceResourceFromNetwork", PolicyArgs.builder()
    .resourceGroupName("string")
    .customRules(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
    .location("string")
    .managedRules(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
    .policyName("string")
    .policySettings(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
    .sku(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
    .tags(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
    .build());

examplepolicy_resource_resource_from_network = azure_native.network.Policy("examplepolicyResourceResourceFromNetwork",
    resource_group_name=string,
    custom_rules={
        rules: [{
            action: string,
            matchConditions: [{
                matchValue: [string],
                matchVariable: string,
                operator: string,
                negateCondition: False,
                selector: string,
                transforms: [string],
            }],
            priority: 0,
            ruleType: string,
            enabledState: string,
            name: string,
            rateLimitDurationInMinutes: 0,
            rateLimitThreshold: 0,
        }],
    },
    location=string,
    managed_rules={
        managedRuleSets: [{
            ruleSetType: string,
            ruleSetVersion: string,
            exclusions: [{
                matchVariable: string,
                selector: string,
                selectorMatchOperator: string,
            }],
            ruleGroupOverrides: [{
                ruleGroupName: string,
                exclusions: [{
                    matchVariable: string,
                    selector: string,
                    selectorMatchOperator: string,
                }],
                rules: [{
                    ruleId: string,
                    action: string,
                    enabledState: string,
                    exclusions: [{
                        matchVariable: string,
                        selector: string,
                        selectorMatchOperator: string,
                    }],
                }],
            }],
            ruleSetAction: string,
        }],
    },
    policy_name=string,
    policy_settings={
        customBlockResponseBody: string,
        customBlockResponseStatusCode: 0,
        enabledState: string,
        mode: string,
        redirectUrl: string,
        requestBodyCheck: string,
    },
    sku={
        name: string,
    },
    tags={
        string: string,
    })

const examplepolicyResourceResourceFromNetwork = new azure_native.network.Policy("examplepolicyResourceResourceFromNetwork", {
    resourceGroupName: "string",
    customRules: {
        rules: [{
            action: "string",
            matchConditions: [{
                matchValue: ["string"],
                matchVariable: "string",
                operator: "string",
                negateCondition: false,
                selector: "string",
                transforms: ["string"],
            }],
            priority: 0,
            ruleType: "string",
            enabledState: "string",
            name: "string",
            rateLimitDurationInMinutes: 0,
            rateLimitThreshold: 0,
        }],
    },
    location: "string",
    managedRules: {
        managedRuleSets: [{
            ruleSetType: "string",
            ruleSetVersion: "string",
            exclusions: [{
                matchVariable: "string",
                selector: "string",
                selectorMatchOperator: "string",
            }],
            ruleGroupOverrides: [{
                ruleGroupName: "string",
                exclusions: [{
                    matchVariable: "string",
                    selector: "string",
                    selectorMatchOperator: "string",
                }],
                rules: [{
                    ruleId: "string",
                    action: "string",
                    enabledState: "string",
                    exclusions: [{
                        matchVariable: "string",
                        selector: "string",
                        selectorMatchOperator: "string",
                    }],
                }],
            }],
            ruleSetAction: "string",
        }],
    },
    policyName: "string",
    policySettings: {
        customBlockResponseBody: "string",
        customBlockResponseStatusCode: 0,
        enabledState: "string",
        mode: "string",
        redirectUrl: "string",
        requestBodyCheck: "string",
    },
    sku: {
        name: "string",
    },
    tags: {
        string: "string",
    },
});

type: azure-native:network:Policy
properties:
    customRules:
        rules:
            - action: string
              enabledState: string
              matchConditions:
                - matchValue:
                    - string
                  matchVariable: string
                  negateCondition: false
                  operator: string
                  selector: string
                  transforms:
                    - string
              name: string
              priority: 0
              rateLimitDurationInMinutes: 0
              rateLimitThreshold: 0
              ruleType: string
    location: string
    managedRules:
        managedRuleSets:
            - exclusions:
                - matchVariable: string
                  selector: string
                  selectorMatchOperator: string
              ruleGroupOverrides:
                - exclusions:
                    - matchVariable: string
                      selector: string
                      selectorMatchOperator: string
                  ruleGroupName: string
                  rules:
                    - action: string
                      enabledState: string
                      exclusions:
                        - matchVariable: string
                          selector: string
                          selectorMatchOperator: string
                      ruleId: string
              ruleSetAction: string
              ruleSetType: string
              ruleSetVersion: string
    policyName: string
    policySettings:
        customBlockResponseBody: string
        customBlockResponseStatusCode: 0
        enabledState: string
        mode: string
        redirectUrl: string
        requestBodyCheck: string
    resourceGroupName: string
    sku:
        name: string
    tags:
        string: string

Policy Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The Policy resource accepts the following input properties:

ResourceGroupName string: Name of the Resource group within the Azure subscription.
CustomRules Pulumi.AzureNative.Network.Inputs.CustomRuleList: Describes custom rules inside the policy.
Location string: Resource location.
ManagedRules Pulumi.AzureNative.Network.Inputs.ManagedRuleSetList: Describes managed rules inside the policy.
PolicyName string: The name of the Web Application Firewall Policy.
PolicySettings Pulumi.AzureNative.Network.Inputs.FrontDoorPolicySettings: Describes settings for the policy.
Sku Pulumi.AzureNative.Network.Inputs.Sku: The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
Tags Dictionary<string, string>: Resource tags.

ResourceGroupName string: Name of the Resource group within the Azure subscription.
CustomRules CustomRuleListArgs: Describes custom rules inside the policy.
Location string: Resource location.
ManagedRules ManagedRuleSetListArgs: Describes managed rules inside the policy.
PolicyName string: The name of the Web Application Firewall Policy.
PolicySettings FrontDoorPolicySettingsArgs: Describes settings for the policy.
Sku SkuArgs: The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
Tags map[string]string: Resource tags.

resourceGroupName String: Name of the Resource group within the Azure subscription.
customRules CustomRuleList: Describes custom rules inside the policy.
location String: Resource location.
managedRules ManagedRuleSetList: Describes managed rules inside the policy.
policyName String: The name of the Web Application Firewall Policy.
policySettings FrontDoorPolicySettings: Describes settings for the policy.
sku Sku: The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
tags Map<String,String>: Resource tags.

resourceGroupName string: Name of the Resource group within the Azure subscription.
customRules CustomRuleList: Describes custom rules inside the policy.
location string: Resource location.
managedRules ManagedRuleSetList: Describes managed rules inside the policy.
policyName string: The name of the Web Application Firewall Policy.
policySettings FrontDoorPolicySettings: Describes settings for the policy.
sku Sku: The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
tags {[key: string]: string}: Resource tags.

resource_group_name str: Name of the Resource group within the Azure subscription.
custom_rules CustomRuleListArgs: Describes custom rules inside the policy.
location str: Resource location.
managed_rules ManagedRuleSetListArgs: Describes managed rules inside the policy.
policy_name str: The name of the Web Application Firewall Policy.
policy_settings FrontDoorPolicySettingsArgs: Describes settings for the policy.
sku SkuArgs: The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
tags Mapping[str, str]: Resource tags.

resourceGroupName String: Name of the Resource group within the Azure subscription.
customRules Property Map: Describes custom rules inside the policy.
location String: Resource location.
managedRules Property Map: Describes managed rules inside the policy.
policyName String: The name of the Web Application Firewall Policy.
policySettings Property Map: Describes settings for the policy.
sku Property Map: The pricing tier of web application firewall policy. Defaults to Classic_AzureFrontDoor if not specified.
tags Map<String>: Resource tags.

Outputs

All input properties are implicitly available as output properties. Additionally, the Policy resource produces the following output properties:

FrontendEndpointLinks List<Pulumi.AzureNative.Network.Outputs.FrontendEndpointLinkResponse>: Describes Frontend Endpoints associated with this Web Application Firewall policy.
Id string: The provider-assigned unique ID for this managed resource.
Name string: Resource name.
ProvisioningState string: Provisioning state of the policy.
ResourceState string
RoutingRuleLinks List<Pulumi.AzureNative.Network.Outputs.RoutingRuleLinkResponse>: Describes Routing Rules associated with this Web Application Firewall policy.
SecurityPolicyLinks List<Pulumi.AzureNative.Network.Outputs.SecurityPolicyLinkResponse>: Describes Security Policy associated with this Web Application Firewall policy.
Type string: Resource type.
Etag string: Gets a unique read-only string that changes whenever the resource is updated.

FrontendEndpointLinks []FrontendEndpointLinkResponse: Describes Frontend Endpoints associated with this Web Application Firewall policy.
Id string: The provider-assigned unique ID for this managed resource.
Name string: Resource name.
ProvisioningState string: Provisioning state of the policy.
ResourceState string
RoutingRuleLinks []RoutingRuleLinkResponse: Describes Routing Rules associated with this Web Application Firewall policy.
SecurityPolicyLinks []SecurityPolicyLinkResponse: Describes Security Policy associated with this Web Application Firewall policy.
Type string: Resource type.
Etag string: Gets a unique read-only string that changes whenever the resource is updated.

frontendEndpointLinks List<FrontendEndpointLinkResponse>: Describes Frontend Endpoints associated with this Web Application Firewall policy.
id String: The provider-assigned unique ID for this managed resource.
name String: Resource name.
provisioningState String: Provisioning state of the policy.
resourceState String
routingRuleLinks List<RoutingRuleLinkResponse>: Describes Routing Rules associated with this Web Application Firewall policy.
securityPolicyLinks List<SecurityPolicyLinkResponse>: Describes Security Policy associated with this Web Application Firewall policy.
type String: Resource type.
etag String: Gets a unique read-only string that changes whenever the resource is updated.

frontendEndpointLinks FrontendEndpointLinkResponse[]: Describes Frontend Endpoints associated with this Web Application Firewall policy.
id string: The provider-assigned unique ID for this managed resource.
name string: Resource name.
provisioningState string: Provisioning state of the policy.
resourceState string
routingRuleLinks RoutingRuleLinkResponse[]: Describes Routing Rules associated with this Web Application Firewall policy.
securityPolicyLinks SecurityPolicyLinkResponse[]: Describes Security Policy associated with this Web Application Firewall policy.
type string: Resource type.
etag string: Gets a unique read-only string that changes whenever the resource is updated.

frontend_endpoint_links Sequence[FrontendEndpointLinkResponse]: Describes Frontend Endpoints associated with this Web Application Firewall policy.
id str: The provider-assigned unique ID for this managed resource.
name str: Resource name.
provisioning_state str: Provisioning state of the policy.
resource_state str
routing_rule_links Sequence[RoutingRuleLinkResponse]: Describes Routing Rules associated with this Web Application Firewall policy.
security_policy_links Sequence[SecurityPolicyLinkResponse]: Describes Security Policy associated with this Web Application Firewall policy.
type str: Resource type.
etag str: Gets a unique read-only string that changes whenever the resource is updated.

frontendEndpointLinks List<Property Map>: Describes Frontend Endpoints associated with this Web Application Firewall policy.
id String: The provider-assigned unique ID for this managed resource.
name String: Resource name.
provisioningState String: Provisioning state of the policy.
resourceState String
routingRuleLinks List<Property Map>: Describes Routing Rules associated with this Web Application Firewall policy.
securityPolicyLinks List<Property Map>: Describes Security Policy associated with this Web Application Firewall policy.
type String: Resource type.
etag String: Gets a unique read-only string that changes whenever the resource is updated.

Supporting Types

ActionType, ActionTypeArgs

Allow: Allow
Block: Block
Log: Log
Redirect: Redirect

ActionTypeAllow: Allow
ActionTypeBlock: Block
ActionTypeLog: Log
ActionTypeRedirect: Redirect

Allow: Allow
Block: Block
Log: Log
Redirect: Redirect

Allow: Allow
Block: Block
Log: Log
Redirect: Redirect

ALLOW: Allow
BLOCK: Block
LOG: Log
REDIRECT: Redirect

"Allow": Allow
"Block": Block
"Log": Log
"Redirect": Redirect

CustomRule, CustomRuleArgs

Action string | Pulumi.AzureNative.Network.ActionType: Describes what action to be applied when rule matches.
MatchConditions List<Pulumi.AzureNative.Network.Inputs.FrontDoorMatchCondition>: List of match conditions.
Priority int: Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
RuleType string | Pulumi.AzureNative.Network.RuleType: Describes type of rule.
EnabledState string | Pulumi.AzureNative.Network.CustomRuleEnabledState: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
Name string: Describes the name of the rule.
RateLimitDurationInMinutes int: Time window for resetting the rate limit count. Default is 1 minute.
RateLimitThreshold int: Number of allowed requests per client within the time window.

Action string | ActionType: Describes what action to be applied when rule matches.
MatchConditions []FrontDoorMatchCondition: List of match conditions.
Priority int: Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
RuleType string | RuleType: Describes type of rule.
EnabledState string | CustomRuleEnabledState: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
Name string: Describes the name of the rule.
RateLimitDurationInMinutes int: Time window for resetting the rate limit count. Default is 1 minute.
RateLimitThreshold int: Number of allowed requests per client within the time window.

action String | ActionType: Describes what action to be applied when rule matches.
matchConditions List<FrontDoorMatchCondition>: List of match conditions.
priority Integer: Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
ruleType String | RuleType: Describes type of rule.
enabledState String | CustomRuleEnabledState: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
name String: Describes the name of the rule.
rateLimitDurationInMinutes Integer: Time window for resetting the rate limit count. Default is 1 minute.
rateLimitThreshold Integer: Number of allowed requests per client within the time window.

action string | ActionType: Describes what action to be applied when rule matches.
matchConditions FrontDoorMatchCondition[]: List of match conditions.
priority number: Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
ruleType string | RuleType: Describes type of rule.
enabledState string | CustomRuleEnabledState: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
name string: Describes the name of the rule.
rateLimitDurationInMinutes number: Time window for resetting the rate limit count. Default is 1 minute.
rateLimitThreshold number: Number of allowed requests per client within the time window.

action str | ActionType: Describes what action to be applied when rule matches.
match_conditions Sequence[FrontDoorMatchCondition]: List of match conditions.
priority int: Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
rule_type str | RuleType: Describes type of rule.
enabled_state str | CustomRuleEnabledState: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
name str: Describes the name of the rule.
rate_limit_duration_in_minutes int: Time window for resetting the rate limit count. Default is 1 minute.
rate_limit_threshold int: Number of allowed requests per client within the time window.

action String | "Allow" | "Block" | "Log" | "Redirect": Describes what action to be applied when rule matches.
matchConditions List<Property Map>: List of match conditions.
priority Number: Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
ruleType String | "MatchRule" | "RateLimitRule": Describes type of rule.
enabledState String | "Disabled" | "Enabled": Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
name String: Describes the name of the rule.
rateLimitDurationInMinutes Number: Time window for resetting the rate limit count. Default is 1 minute.
rateLimitThreshold Number: Number of allowed requests per client within the time window.

CustomRuleEnabledState, CustomRuleEnabledStateArgs

Disabled: Disabled
Enabled: Enabled

CustomRuleEnabledStateDisabled: Disabled
CustomRuleEnabledStateEnabled: Enabled

Disabled: Disabled
Enabled: Enabled

Disabled: Disabled
Enabled: Enabled

DISABLED: Disabled
ENABLED: Enabled

"Disabled": Disabled
"Enabled": Enabled

CustomRuleList, CustomRuleListArgs

Rules List<Pulumi.AzureNative.Network.Inputs.CustomRule>: List of rules

Rules []CustomRule: List of rules

rules List<CustomRule>: List of rules

rules CustomRule[]: List of rules

rules Sequence[CustomRule]: List of rules

rules List<Property Map>: List of rules

CustomRuleListResponse, CustomRuleListResponseArgs

Rules List<Pulumi.AzureNative.Network.Inputs.CustomRuleResponse>: List of rules

Rules []CustomRuleResponse: List of rules

rules List<CustomRuleResponse>: List of rules

rules CustomRuleResponse[]: List of rules

rules Sequence[CustomRuleResponse]: List of rules

rules List<Property Map>: List of rules

CustomRuleResponse, CustomRuleResponseArgs

Action string: Describes what action to be applied when rule matches.
MatchConditions List<Pulumi.AzureNative.Network.Inputs.FrontDoorMatchConditionResponse>: List of match conditions.
Priority int: Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
RuleType string: Describes type of rule.
EnabledState string: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
Name string: Describes the name of the rule.
RateLimitDurationInMinutes int: Time window for resetting the rate limit count. Default is 1 minute.
RateLimitThreshold int: Number of allowed requests per client within the time window.

Action string: Describes what action to be applied when rule matches.
MatchConditions []FrontDoorMatchConditionResponse: List of match conditions.
Priority int: Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
RuleType string: Describes type of rule.
EnabledState string: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
Name string: Describes the name of the rule.
RateLimitDurationInMinutes int: Time window for resetting the rate limit count. Default is 1 minute.
RateLimitThreshold int: Number of allowed requests per client within the time window.

action String: Describes what action to be applied when rule matches.
matchConditions List<FrontDoorMatchConditionResponse>: List of match conditions.
priority Integer: Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
ruleType String: Describes type of rule.
enabledState String: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
name String: Describes the name of the rule.
rateLimitDurationInMinutes Integer: Time window for resetting the rate limit count. Default is 1 minute.
rateLimitThreshold Integer: Number of allowed requests per client within the time window.

action string: Describes what action to be applied when rule matches.
matchConditions FrontDoorMatchConditionResponse[]: List of match conditions.
priority number: Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
ruleType string: Describes type of rule.
enabledState string: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
name string: Describes the name of the rule.
rateLimitDurationInMinutes number: Time window for resetting the rate limit count. Default is 1 minute.
rateLimitThreshold number: Number of allowed requests per client within the time window.

action str: Describes what action to be applied when rule matches.
match_conditions Sequence[FrontDoorMatchConditionResponse]: List of match conditions.
priority int: Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
rule_type str: Describes type of rule.
enabled_state str: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
name str: Describes the name of the rule.
rate_limit_duration_in_minutes int: Time window for resetting the rate limit count. Default is 1 minute.
rate_limit_threshold int: Number of allowed requests per client within the time window.

action String: Describes what action to be applied when rule matches.
matchConditions List<Property Map>: List of match conditions.
priority Number: Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
ruleType String: Describes type of rule.
enabledState String: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
name String: Describes the name of the rule.
rateLimitDurationInMinutes Number: Time window for resetting the rate limit count. Default is 1 minute.
rateLimitThreshold Number: Number of allowed requests per client within the time window.

FrontDoorManagedRuleGroupOverride, FrontDoorManagedRuleGroupOverrideArgs

RuleGroupName string: Describes the managed rule group to override.
Exclusions List<Pulumi.AzureNative.Network.Inputs.ManagedRuleExclusion>: Describes the exclusions that are applied to all rules in the group.
Rules List<Pulumi.AzureNative.Network.Inputs.FrontDoorManagedRuleOverride>: List of rules that will be disabled. If none specified, all rules in the group will be disabled.

RuleGroupName string: Describes the managed rule group to override.
Exclusions []ManagedRuleExclusion: Describes the exclusions that are applied to all rules in the group.
Rules []FrontDoorManagedRuleOverride: List of rules that will be disabled. If none specified, all rules in the group will be disabled.

ruleGroupName String: Describes the managed rule group to override.
exclusions List<ManagedRuleExclusion>: Describes the exclusions that are applied to all rules in the group.
rules List<FrontDoorManagedRuleOverride>: List of rules that will be disabled. If none specified, all rules in the group will be disabled.

ruleGroupName string: Describes the managed rule group to override.
exclusions ManagedRuleExclusion[]: Describes the exclusions that are applied to all rules in the group.
rules FrontDoorManagedRuleOverride[]: List of rules that will be disabled. If none specified, all rules in the group will be disabled.

rule_group_name str: Describes the managed rule group to override.
exclusions Sequence[ManagedRuleExclusion]: Describes the exclusions that are applied to all rules in the group.
rules Sequence[FrontDoorManagedRuleOverride]: List of rules that will be disabled. If none specified, all rules in the group will be disabled.

ruleGroupName String: Describes the managed rule group to override.
exclusions List<Property Map>: Describes the exclusions that are applied to all rules in the group.
rules List<Property Map>: List of rules that will be disabled. If none specified, all rules in the group will be disabled.

FrontDoorManagedRuleGroupOverrideResponse, FrontDoorManagedRuleGroupOverrideResponseArgs

RuleGroupName string: Describes the managed rule group to override.
Exclusions List<Pulumi.AzureNative.Network.Inputs.ManagedRuleExclusionResponse>: Describes the exclusions that are applied to all rules in the group.
Rules List<Pulumi.AzureNative.Network.Inputs.FrontDoorManagedRuleOverrideResponse>: List of rules that will be disabled. If none specified, all rules in the group will be disabled.

RuleGroupName string: Describes the managed rule group to override.
Exclusions []ManagedRuleExclusionResponse: Describes the exclusions that are applied to all rules in the group.
Rules []FrontDoorManagedRuleOverrideResponse: List of rules that will be disabled. If none specified, all rules in the group will be disabled.

ruleGroupName String: Describes the managed rule group to override.
exclusions List<ManagedRuleExclusionResponse>: Describes the exclusions that are applied to all rules in the group.
rules List<FrontDoorManagedRuleOverrideResponse>: List of rules that will be disabled. If none specified, all rules in the group will be disabled.

ruleGroupName string: Describes the managed rule group to override.
exclusions ManagedRuleExclusionResponse[]: Describes the exclusions that are applied to all rules in the group.
rules FrontDoorManagedRuleOverrideResponse[]: List of rules that will be disabled. If none specified, all rules in the group will be disabled.

rule_group_name str: Describes the managed rule group to override.
exclusions Sequence[ManagedRuleExclusionResponse]: Describes the exclusions that are applied to all rules in the group.
rules Sequence[FrontDoorManagedRuleOverrideResponse]: List of rules that will be disabled. If none specified, all rules in the group will be disabled.

ruleGroupName String: Describes the managed rule group to override.
exclusions List<Property Map>: Describes the exclusions that are applied to all rules in the group.
rules List<Property Map>: List of rules that will be disabled. If none specified, all rules in the group will be disabled.

FrontDoorManagedRuleOverride, FrontDoorManagedRuleOverrideArgs

RuleId string: Identifier for the managed rule.
Action string | Pulumi.AzureNative.Network.ActionType: Describes the override action to be applied when rule matches.
EnabledState string | Pulumi.AzureNative.Network.ManagedRuleEnabledState: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
Exclusions List<Pulumi.AzureNative.Network.Inputs.ManagedRuleExclusion>: Describes the exclusions that are applied to this specific rule.

RuleId string: Identifier for the managed rule.
Action string | ActionType: Describes the override action to be applied when rule matches.
EnabledState string | ManagedRuleEnabledState: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
Exclusions []ManagedRuleExclusion: Describes the exclusions that are applied to this specific rule.

ruleId String: Identifier for the managed rule.
action String | ActionType: Describes the override action to be applied when rule matches.
enabledState String | ManagedRuleEnabledState: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
exclusions List<ManagedRuleExclusion>: Describes the exclusions that are applied to this specific rule.

ruleId string: Identifier for the managed rule.
action string | ActionType: Describes the override action to be applied when rule matches.
enabledState string | ManagedRuleEnabledState: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
exclusions ManagedRuleExclusion[]: Describes the exclusions that are applied to this specific rule.

rule_id str: Identifier for the managed rule.
action str | ActionType: Describes the override action to be applied when rule matches.
enabled_state str | ManagedRuleEnabledState: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
exclusions Sequence[ManagedRuleExclusion]: Describes the exclusions that are applied to this specific rule.

ruleId String: Identifier for the managed rule.
action String | "Allow" | "Block" | "Log" | "Redirect": Describes the override action to be applied when rule matches.
enabledState String | "Disabled": Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
exclusions List<Property Map>: Describes the exclusions that are applied to this specific rule.

FrontDoorManagedRuleOverrideResponse, FrontDoorManagedRuleOverrideResponseArgs

RuleId string: Identifier for the managed rule.
Action string: Describes the override action to be applied when rule matches.
EnabledState string: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
Exclusions List<Pulumi.AzureNative.Network.Inputs.ManagedRuleExclusionResponse>: Describes the exclusions that are applied to this specific rule.

RuleId string: Identifier for the managed rule.
Action string: Describes the override action to be applied when rule matches.
EnabledState string: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
Exclusions []ManagedRuleExclusionResponse: Describes the exclusions that are applied to this specific rule.

ruleId String: Identifier for the managed rule.
action String: Describes the override action to be applied when rule matches.
enabledState String: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
exclusions List<ManagedRuleExclusionResponse>: Describes the exclusions that are applied to this specific rule.

ruleId string: Identifier for the managed rule.
action string: Describes the override action to be applied when rule matches.
enabledState string: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
exclusions ManagedRuleExclusionResponse[]: Describes the exclusions that are applied to this specific rule.

rule_id str: Identifier for the managed rule.
action str: Describes the override action to be applied when rule matches.
enabled_state str: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
exclusions Sequence[ManagedRuleExclusionResponse]: Describes the exclusions that are applied to this specific rule.

ruleId String: Identifier for the managed rule.
action String: Describes the override action to be applied when rule matches.
enabledState String: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.
exclusions List<Property Map>: Describes the exclusions that are applied to this specific rule.

FrontDoorManagedRuleSet, FrontDoorManagedRuleSetArgs

RuleSetType string: Defines the rule set type to use.
RuleSetVersion string: Defines the version of the rule set to use.
Exclusions List<Pulumi.AzureNative.Network.Inputs.ManagedRuleExclusion>: Describes the exclusions that are applied to all rules in the set.
RuleGroupOverrides List<Pulumi.AzureNative.Network.Inputs.FrontDoorManagedRuleGroupOverride>: Defines the rule group overrides to apply to the rule set.
RuleSetAction string | Pulumi.AzureNative.Network.ManagedRuleSetActionType: Defines the action to take when a managed rule set score threshold is met.

RuleSetType string: Defines the rule set type to use.
RuleSetVersion string: Defines the version of the rule set to use.
Exclusions []ManagedRuleExclusion: Describes the exclusions that are applied to all rules in the set.
RuleGroupOverrides []FrontDoorManagedRuleGroupOverride: Defines the rule group overrides to apply to the rule set.
RuleSetAction string | ManagedRuleSetActionType: Defines the action to take when a managed rule set score threshold is met.

ruleSetType String: Defines the rule set type to use.
ruleSetVersion String: Defines the version of the rule set to use.
exclusions List<ManagedRuleExclusion>: Describes the exclusions that are applied to all rules in the set.
ruleGroupOverrides List<FrontDoorManagedRuleGroupOverride>: Defines the rule group overrides to apply to the rule set.
ruleSetAction String | ManagedRuleSetActionType: Defines the action to take when a managed rule set score threshold is met.

ruleSetType string: Defines the rule set type to use.
ruleSetVersion string: Defines the version of the rule set to use.
exclusions ManagedRuleExclusion[]: Describes the exclusions that are applied to all rules in the set.
ruleGroupOverrides FrontDoorManagedRuleGroupOverride[]: Defines the rule group overrides to apply to the rule set.
ruleSetAction string | ManagedRuleSetActionType: Defines the action to take when a managed rule set score threshold is met.

rule_set_type str: Defines the rule set type to use.
rule_set_version str: Defines the version of the rule set to use.
exclusions Sequence[ManagedRuleExclusion]: Describes the exclusions that are applied to all rules in the set.
rule_group_overrides Sequence[FrontDoorManagedRuleGroupOverride]: Defines the rule group overrides to apply to the rule set.
rule_set_action str | ManagedRuleSetActionType: Defines the action to take when a managed rule set score threshold is met.

ruleSetType String: Defines the rule set type to use.
ruleSetVersion String: Defines the version of the rule set to use.
exclusions List<Property Map>: Describes the exclusions that are applied to all rules in the set.
ruleGroupOverrides List<Property Map>: Defines the rule group overrides to apply to the rule set.
ruleSetAction String | "Block" | "Log" | "Redirect": Defines the action to take when a managed rule set score threshold is met.

FrontDoorManagedRuleSetResponse, FrontDoorManagedRuleSetResponseArgs

RuleSetType string: Defines the rule set type to use.
RuleSetVersion string: Defines the version of the rule set to use.
Exclusions List<Pulumi.AzureNative.Network.Inputs.ManagedRuleExclusionResponse>: Describes the exclusions that are applied to all rules in the set.
RuleGroupOverrides List<Pulumi.AzureNative.Network.Inputs.FrontDoorManagedRuleGroupOverrideResponse>: Defines the rule group overrides to apply to the rule set.
RuleSetAction string: Defines the action to take when a managed rule set score threshold is met.

RuleSetType string: Defines the rule set type to use.
RuleSetVersion string: Defines the version of the rule set to use.
Exclusions []ManagedRuleExclusionResponse: Describes the exclusions that are applied to all rules in the set.
RuleGroupOverrides []FrontDoorManagedRuleGroupOverrideResponse: Defines the rule group overrides to apply to the rule set.
RuleSetAction string: Defines the action to take when a managed rule set score threshold is met.

ruleSetType String: Defines the rule set type to use.
ruleSetVersion String: Defines the version of the rule set to use.
exclusions List<ManagedRuleExclusionResponse>: Describes the exclusions that are applied to all rules in the set.
ruleGroupOverrides List<FrontDoorManagedRuleGroupOverrideResponse>: Defines the rule group overrides to apply to the rule set.
ruleSetAction String: Defines the action to take when a managed rule set score threshold is met.

ruleSetType string: Defines the rule set type to use.
ruleSetVersion string: Defines the version of the rule set to use.
exclusions ManagedRuleExclusionResponse[]: Describes the exclusions that are applied to all rules in the set.
ruleGroupOverrides FrontDoorManagedRuleGroupOverrideResponse[]: Defines the rule group overrides to apply to the rule set.
ruleSetAction string: Defines the action to take when a managed rule set score threshold is met.

rule_set_type str: Defines the rule set type to use.
rule_set_version str: Defines the version of the rule set to use.
exclusions Sequence[ManagedRuleExclusionResponse]: Describes the exclusions that are applied to all rules in the set.
rule_group_overrides Sequence[FrontDoorManagedRuleGroupOverrideResponse]: Defines the rule group overrides to apply to the rule set.
rule_set_action str: Defines the action to take when a managed rule set score threshold is met.

ruleSetType String: Defines the rule set type to use.
ruleSetVersion String: Defines the version of the rule set to use.
exclusions List<Property Map>: Describes the exclusions that are applied to all rules in the set.
ruleGroupOverrides List<Property Map>: Defines the rule group overrides to apply to the rule set.
ruleSetAction String: Defines the action to take when a managed rule set score threshold is met.

FrontDoorMatchCondition, FrontDoorMatchConditionArgs

MatchValue List<string>: List of possible match values.
MatchVariable string | Pulumi.AzureNative.Network.FrontDoorMatchVariable: Request variable to compare with.
Operator string | Pulumi.AzureNative.Network.Operator: Comparison type to use for matching with the variable value.
NegateCondition bool: Describes if the result of this condition should be negated.
Selector string: Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
Transforms List<Union<string, Pulumi.AzureNative.Network.TransformType>>: List of transforms.

MatchValue []string: List of possible match values.
MatchVariable string | FrontDoorMatchVariable: Request variable to compare with.
Operator string | Operator: Comparison type to use for matching with the variable value.
NegateCondition bool: Describes if the result of this condition should be negated.
Selector string: Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
Transforms []string: List of transforms.

matchValue List<String>: List of possible match values.
matchVariable String | FrontDoorMatchVariable: Request variable to compare with.
operator String | Operator: Comparison type to use for matching with the variable value.
negateCondition Boolean: Describes if the result of this condition should be negated.
selector String: Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
transforms List<Either<String,TransformType>>: List of transforms.

matchValue string[]: List of possible match values.
matchVariable string | FrontDoorMatchVariable: Request variable to compare with.
operator string | Operator: Comparison type to use for matching with the variable value.
negateCondition boolean: Describes if the result of this condition should be negated.
selector string: Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
transforms (string | TransformType)[]: List of transforms.

match_value Sequence[str]: List of possible match values.
match_variable str | FrontDoorMatchVariable: Request variable to compare with.
operator str | Operator: Comparison type to use for matching with the variable value.
negate_condition bool: Describes if the result of this condition should be negated.
selector str: Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
transforms Sequence[Union[str, TransformType]]: List of transforms.

matchValue List<String>: List of possible match values.
matchVariable String | "RemoteAddr" | "RequestMethod" | "QueryString" | "PostArgs" | "RequestUri" | "RequestHeader" | "RequestBody" | "Cookies" | "SocketAddr": Request variable to compare with.
operator String | "Any" | "IPMatch" | "GeoMatch" | "Equal" | "Contains" | "LessThan" | "GreaterThan" | "LessThanOrEqual" | "GreaterThanOrEqual" | "BeginsWith" | "EndsWith" | "RegEx": Comparison type to use for matching with the variable value.
negateCondition Boolean: Describes if the result of this condition should be negated.
selector String: Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
transforms List<String | "Lowercase" | "Uppercase" | "Trim" | "UrlDecode" | "UrlEncode" | "RemoveNulls">: List of transforms.

FrontDoorMatchConditionResponse, FrontDoorMatchConditionResponseArgs

MatchValue List<string>: List of possible match values.
MatchVariable string: Request variable to compare with.
Operator string: Comparison type to use for matching with the variable value.
NegateCondition bool: Describes if the result of this condition should be negated.
Selector string: Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
Transforms List<string>: List of transforms.

MatchValue []string: List of possible match values.
MatchVariable string: Request variable to compare with.
Operator string: Comparison type to use for matching with the variable value.
NegateCondition bool: Describes if the result of this condition should be negated.
Selector string: Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
Transforms []string: List of transforms.

matchValue List<String>: List of possible match values.
matchVariable String: Request variable to compare with.
operator String: Comparison type to use for matching with the variable value.
negateCondition Boolean: Describes if the result of this condition should be negated.
selector String: Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
transforms List<String>: List of transforms.

matchValue string[]: List of possible match values.
matchVariable string: Request variable to compare with.
operator string: Comparison type to use for matching with the variable value.
negateCondition boolean: Describes if the result of this condition should be negated.
selector string: Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
transforms string[]: List of transforms.

match_value Sequence[str]: List of possible match values.
match_variable str: Request variable to compare with.
operator str: Comparison type to use for matching with the variable value.
negate_condition bool: Describes if the result of this condition should be negated.
selector str: Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
transforms Sequence[str]: List of transforms.

matchValue List<String>: List of possible match values.
matchVariable String: Request variable to compare with.
operator String: Comparison type to use for matching with the variable value.
negateCondition Boolean: Describes if the result of this condition should be negated.
selector String: Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null.
transforms List<String>: List of transforms.

FrontDoorMatchVariable, FrontDoorMatchVariableArgs

RemoteAddr: RemoteAddr
RequestMethod: RequestMethod
QueryString: QueryString
PostArgs: PostArgs
RequestUri: RequestUri
RequestHeader: RequestHeader
RequestBody: RequestBody
Cookies: Cookies
SocketAddr: SocketAddr

FrontDoorMatchVariableRemoteAddr: RemoteAddr
FrontDoorMatchVariableRequestMethod: RequestMethod
FrontDoorMatchVariableQueryString: QueryString
FrontDoorMatchVariablePostArgs: PostArgs
FrontDoorMatchVariableRequestUri: RequestUri
FrontDoorMatchVariableRequestHeader: RequestHeader
FrontDoorMatchVariableRequestBody: RequestBody
FrontDoorMatchVariableCookies: Cookies
FrontDoorMatchVariableSocketAddr: SocketAddr

RemoteAddr: RemoteAddr
RequestMethod: RequestMethod
QueryString: QueryString
PostArgs: PostArgs
RequestUri: RequestUri
RequestHeader: RequestHeader
RequestBody: RequestBody
Cookies: Cookies
SocketAddr: SocketAddr

RemoteAddr: RemoteAddr
RequestMethod: RequestMethod
QueryString: QueryString
PostArgs: PostArgs
RequestUri: RequestUri
RequestHeader: RequestHeader
RequestBody: RequestBody
Cookies: Cookies
SocketAddr: SocketAddr

REMOTE_ADDR: RemoteAddr
REQUEST_METHOD: RequestMethod
QUERY_STRING: QueryString
POST_ARGS: PostArgs
REQUEST_URI: RequestUri
REQUEST_HEADER: RequestHeader
REQUEST_BODY: RequestBody
COOKIES: Cookies
SOCKET_ADDR: SocketAddr

"RemoteAddr": RemoteAddr
"RequestMethod": RequestMethod
"QueryString": QueryString
"PostArgs": PostArgs
"RequestUri": RequestUri
"RequestHeader": RequestHeader
"RequestBody": RequestBody
"Cookies": Cookies
"SocketAddr": SocketAddr

FrontDoorPolicySettings, FrontDoorPolicySettingsArgs

CustomBlockResponseBody string: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
CustomBlockResponseStatusCode int: If the action type is block, customer can override the response status code.
EnabledState string | Pulumi.AzureNative.Network.PolicyEnabledState: Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
Mode string | Pulumi.AzureNative.Network.PolicyMode: Describes if it is in detection mode or prevention mode at policy level.
RedirectUrl string: If action type is redirect, this field represents redirect URL for the client.
RequestBodyCheck string | Pulumi.AzureNative.Network.PolicyRequestBodyCheck: Describes if policy managed rules will inspect the request body content.

CustomBlockResponseBody string: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
CustomBlockResponseStatusCode int: If the action type is block, customer can override the response status code.
EnabledState string | PolicyEnabledState: Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
Mode string | PolicyMode: Describes if it is in detection mode or prevention mode at policy level.
RedirectUrl string: If action type is redirect, this field represents redirect URL for the client.
RequestBodyCheck string | PolicyRequestBodyCheck: Describes if policy managed rules will inspect the request body content.

customBlockResponseBody String: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
customBlockResponseStatusCode Integer: If the action type is block, customer can override the response status code.
enabledState String | PolicyEnabledState: Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
mode String | PolicyMode: Describes if it is in detection mode or prevention mode at policy level.
redirectUrl String: If action type is redirect, this field represents redirect URL for the client.
requestBodyCheck String | PolicyRequestBodyCheck: Describes if policy managed rules will inspect the request body content.

customBlockResponseBody string: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
customBlockResponseStatusCode number: If the action type is block, customer can override the response status code.
enabledState string | PolicyEnabledState: Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
mode string | PolicyMode: Describes if it is in detection mode or prevention mode at policy level.
redirectUrl string: If action type is redirect, this field represents redirect URL for the client.
requestBodyCheck string | PolicyRequestBodyCheck: Describes if policy managed rules will inspect the request body content.

custom_block_response_body str: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
custom_block_response_status_code int: If the action type is block, customer can override the response status code.
enabled_state str | PolicyEnabledState: Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
mode str | PolicyMode: Describes if it is in detection mode or prevention mode at policy level.
redirect_url str: If action type is redirect, this field represents redirect URL for the client.
request_body_check str | PolicyRequestBodyCheck: Describes if policy managed rules will inspect the request body content.

customBlockResponseBody String: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
customBlockResponseStatusCode Number: If the action type is block, customer can override the response status code.
enabledState String | "Disabled" | "Enabled": Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
mode String | "Prevention" | "Detection": Describes if it is in detection mode or prevention mode at policy level.
redirectUrl String: If action type is redirect, this field represents redirect URL for the client.
requestBodyCheck String | "Disabled" | "Enabled": Describes if policy managed rules will inspect the request body content.

FrontDoorPolicySettingsResponse, FrontDoorPolicySettingsResponseArgs

CustomBlockResponseBody string: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
CustomBlockResponseStatusCode int: If the action type is block, customer can override the response status code.
EnabledState string: Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
Mode string: Describes if it is in detection mode or prevention mode at policy level.
RedirectUrl string: If action type is redirect, this field represents redirect URL for the client.
RequestBodyCheck string: Describes if policy managed rules will inspect the request body content.

CustomBlockResponseBody string: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
CustomBlockResponseStatusCode int: If the action type is block, customer can override the response status code.
EnabledState string: Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
Mode string: Describes if it is in detection mode or prevention mode at policy level.
RedirectUrl string: If action type is redirect, this field represents redirect URL for the client.
RequestBodyCheck string: Describes if policy managed rules will inspect the request body content.

customBlockResponseBody String: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
customBlockResponseStatusCode Integer: If the action type is block, customer can override the response status code.
enabledState String: Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
mode String: Describes if it is in detection mode or prevention mode at policy level.
redirectUrl String: If action type is redirect, this field represents redirect URL for the client.
requestBodyCheck String: Describes if policy managed rules will inspect the request body content.

customBlockResponseBody string: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
customBlockResponseStatusCode number: If the action type is block, customer can override the response status code.
enabledState string: Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
mode string: Describes if it is in detection mode or prevention mode at policy level.
redirectUrl string: If action type is redirect, this field represents redirect URL for the client.
requestBodyCheck string: Describes if policy managed rules will inspect the request body content.

custom_block_response_body str: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
custom_block_response_status_code int: If the action type is block, customer can override the response status code.
enabled_state str: Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
mode str: Describes if it is in detection mode or prevention mode at policy level.
redirect_url str: If action type is redirect, this field represents redirect URL for the client.
request_body_check str: Describes if policy managed rules will inspect the request body content.

customBlockResponseBody String: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
customBlockResponseStatusCode Number: If the action type is block, customer can override the response status code.
enabledState String: Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified.
mode String: Describes if it is in detection mode or prevention mode at policy level.
redirectUrl String: If action type is redirect, this field represents redirect URL for the client.
requestBodyCheck String: Describes if policy managed rules will inspect the request body content.

FrontendEndpointLinkResponse, FrontendEndpointLinkResponseArgs

Id string: Resource ID.

Id string: Resource ID.

id String: Resource ID.

id string: Resource ID.

id str: Resource ID.

id String: Resource ID.

ManagedRuleEnabledState, ManagedRuleEnabledStateArgs

Disabled: Disabled

ManagedRuleEnabledStateDisabled: Disabled

Disabled: Disabled

Disabled: Disabled

DISABLED: Disabled

"Disabled": Disabled

ManagedRuleExclusion, ManagedRuleExclusionArgs

MatchVariable string | Pulumi.AzureNative.Network.ManagedRuleExclusionMatchVariable: The variable type to be excluded.
Selector string: Selector value for which elements in the collection this exclusion applies to.
SelectorMatchOperator string | Pulumi.AzureNative.Network.ManagedRuleExclusionSelectorMatchOperator: Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

MatchVariable string | ManagedRuleExclusionMatchVariable: The variable type to be excluded.
Selector string: Selector value for which elements in the collection this exclusion applies to.
SelectorMatchOperator string | ManagedRuleExclusionSelectorMatchOperator: Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

matchVariable String | ManagedRuleExclusionMatchVariable: The variable type to be excluded.
selector String: Selector value for which elements in the collection this exclusion applies to.
selectorMatchOperator String | ManagedRuleExclusionSelectorMatchOperator: Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

matchVariable string | ManagedRuleExclusionMatchVariable: The variable type to be excluded.
selector string: Selector value for which elements in the collection this exclusion applies to.
selectorMatchOperator string | ManagedRuleExclusionSelectorMatchOperator: Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

match_variable str | ManagedRuleExclusionMatchVariable: The variable type to be excluded.
selector str: Selector value for which elements in the collection this exclusion applies to.
selector_match_operator str | ManagedRuleExclusionSelectorMatchOperator: Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

matchVariable String | "RequestHeaderNames" | "RequestCookieNames" | "QueryStringArgNames" | "RequestBodyPostArgNames" | "RequestBodyJsonArgNames": The variable type to be excluded.
selector String: Selector value for which elements in the collection this exclusion applies to.
selectorMatchOperator String | "Equals" | "Contains" | "StartsWith" | "EndsWith" | "EqualsAny": Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

ManagedRuleExclusionMatchVariable, ManagedRuleExclusionMatchVariableArgs

RequestHeaderNames: RequestHeaderNames
RequestCookieNames: RequestCookieNames
QueryStringArgNames: QueryStringArgNames
RequestBodyPostArgNames: RequestBodyPostArgNames
RequestBodyJsonArgNames: RequestBodyJsonArgNames

ManagedRuleExclusionMatchVariableRequestHeaderNames: RequestHeaderNames
ManagedRuleExclusionMatchVariableRequestCookieNames: RequestCookieNames
ManagedRuleExclusionMatchVariableQueryStringArgNames: QueryStringArgNames
ManagedRuleExclusionMatchVariableRequestBodyPostArgNames: RequestBodyPostArgNames
ManagedRuleExclusionMatchVariableRequestBodyJsonArgNames: RequestBodyJsonArgNames

RequestHeaderNames: RequestHeaderNames
RequestCookieNames: RequestCookieNames
QueryStringArgNames: QueryStringArgNames
RequestBodyPostArgNames: RequestBodyPostArgNames
RequestBodyJsonArgNames: RequestBodyJsonArgNames

RequestHeaderNames: RequestHeaderNames
RequestCookieNames: RequestCookieNames
QueryStringArgNames: QueryStringArgNames
RequestBodyPostArgNames: RequestBodyPostArgNames
RequestBodyJsonArgNames: RequestBodyJsonArgNames

REQUEST_HEADER_NAMES: RequestHeaderNames
REQUEST_COOKIE_NAMES: RequestCookieNames
QUERY_STRING_ARG_NAMES: QueryStringArgNames
REQUEST_BODY_POST_ARG_NAMES: RequestBodyPostArgNames
REQUEST_BODY_JSON_ARG_NAMES: RequestBodyJsonArgNames

"RequestHeaderNames": RequestHeaderNames
"RequestCookieNames": RequestCookieNames
"QueryStringArgNames": QueryStringArgNames
"RequestBodyPostArgNames": RequestBodyPostArgNames
"RequestBodyJsonArgNames": RequestBodyJsonArgNames

ManagedRuleExclusionResponse, ManagedRuleExclusionResponseArgs

MatchVariable string: The variable type to be excluded.
Selector string: Selector value for which elements in the collection this exclusion applies to.
SelectorMatchOperator string: Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

MatchVariable string: The variable type to be excluded.
Selector string: Selector value for which elements in the collection this exclusion applies to.
SelectorMatchOperator string: Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

matchVariable String: The variable type to be excluded.
selector String: Selector value for which elements in the collection this exclusion applies to.
selectorMatchOperator String: Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

matchVariable string: The variable type to be excluded.
selector string: Selector value for which elements in the collection this exclusion applies to.
selectorMatchOperator string: Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

match_variable str: The variable type to be excluded.
selector str: Selector value for which elements in the collection this exclusion applies to.
selector_match_operator str: Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

matchVariable String: The variable type to be excluded.
selector String: Selector value for which elements in the collection this exclusion applies to.
selectorMatchOperator String: Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to.

ManagedRuleExclusionSelectorMatchOperator, ManagedRuleExclusionSelectorMatchOperatorArgs

EqualsValue: Equals
Contains: Contains
StartsWith: StartsWith
EndsWith: EndsWith
EqualsAny: EqualsAny

ManagedRuleExclusionSelectorMatchOperatorEquals: Equals
ManagedRuleExclusionSelectorMatchOperatorContains: Contains
ManagedRuleExclusionSelectorMatchOperatorStartsWith: StartsWith
ManagedRuleExclusionSelectorMatchOperatorEndsWith: EndsWith
ManagedRuleExclusionSelectorMatchOperatorEqualsAny: EqualsAny

Equals: Equals
Contains: Contains
StartsWith: StartsWith
EndsWith: EndsWith
EqualsAny: EqualsAny

Equals: Equals
Contains: Contains
StartsWith: StartsWith
EndsWith: EndsWith
EqualsAny: EqualsAny

EQUALS: Equals
CONTAINS: Contains
STARTS_WITH: StartsWith
ENDS_WITH: EndsWith
EQUALS_ANY: EqualsAny

"Equals": Equals
"Contains": Contains
"StartsWith": StartsWith
"EndsWith": EndsWith
"EqualsAny": EqualsAny

ManagedRuleSetActionType, ManagedRuleSetActionTypeArgs

Block: Block
Log: Log
Redirect: Redirect

ManagedRuleSetActionTypeBlock: Block
ManagedRuleSetActionTypeLog: Log
ManagedRuleSetActionTypeRedirect: Redirect

Block: Block
Log: Log
Redirect: Redirect

Block: Block
Log: Log
Redirect: Redirect

BLOCK: Block
LOG: Log
REDIRECT: Redirect

"Block": Block
"Log": Log
"Redirect": Redirect

ManagedRuleSetList, ManagedRuleSetListArgs

ManagedRuleSets List<Pulumi.AzureNative.Network.Inputs.FrontDoorManagedRuleSet>: List of rule sets.

ManagedRuleSets []FrontDoorManagedRuleSet: List of rule sets.

managedRuleSets List<FrontDoorManagedRuleSet>: List of rule sets.

managedRuleSets FrontDoorManagedRuleSet[]: List of rule sets.

managed_rule_sets Sequence[FrontDoorManagedRuleSet]: List of rule sets.

managedRuleSets List<Property Map>: List of rule sets.

ManagedRuleSetListResponse, ManagedRuleSetListResponseArgs

ManagedRuleSets List<Pulumi.AzureNative.Network.Inputs.FrontDoorManagedRuleSetResponse>: List of rule sets.

ManagedRuleSets []FrontDoorManagedRuleSetResponse: List of rule sets.

managedRuleSets List<FrontDoorManagedRuleSetResponse>: List of rule sets.

managedRuleSets FrontDoorManagedRuleSetResponse[]: List of rule sets.

managed_rule_sets Sequence[FrontDoorManagedRuleSetResponse]: List of rule sets.

managedRuleSets List<Property Map>: List of rule sets.

Operator, OperatorArgs

Any: Any
IPMatch: IPMatch
GeoMatch: GeoMatch
Equal: Equal
Contains: Contains
LessThan: LessThan
GreaterThan: GreaterThan
LessThanOrEqual: LessThanOrEqual
GreaterThanOrEqual: GreaterThanOrEqual
BeginsWith: BeginsWith
EndsWith: EndsWith
RegEx: RegEx

OperatorAny: Any
OperatorIPMatch: IPMatch
OperatorGeoMatch: GeoMatch
OperatorEqual: Equal
OperatorContains: Contains
OperatorLessThan: LessThan
OperatorGreaterThan: GreaterThan
OperatorLessThanOrEqual: LessThanOrEqual
OperatorGreaterThanOrEqual: GreaterThanOrEqual
OperatorBeginsWith: BeginsWith
OperatorEndsWith: EndsWith
OperatorRegEx: RegEx

Any: Any
IPMatch: IPMatch
GeoMatch: GeoMatch
Equal: Equal
Contains: Contains
LessThan: LessThan
GreaterThan: GreaterThan
LessThanOrEqual: LessThanOrEqual
GreaterThanOrEqual: GreaterThanOrEqual
BeginsWith: BeginsWith
EndsWith: EndsWith
RegEx: RegEx

Any: Any
IPMatch: IPMatch
GeoMatch: GeoMatch
Equal: Equal
Contains: Contains
LessThan: LessThan
GreaterThan: GreaterThan
LessThanOrEqual: LessThanOrEqual
GreaterThanOrEqual: GreaterThanOrEqual
BeginsWith: BeginsWith
EndsWith: EndsWith
RegEx: RegEx

ANY: Any
IP_MATCH: IPMatch
GEO_MATCH: GeoMatch
EQUAL: Equal
CONTAINS: Contains
LESS_THAN: LessThan
GREATER_THAN: GreaterThan
LESS_THAN_OR_EQUAL: LessThanOrEqual
GREATER_THAN_OR_EQUAL: GreaterThanOrEqual
BEGINS_WITH: BeginsWith
ENDS_WITH: EndsWith
REG_EX: RegEx

"Any": Any
"IPMatch": IPMatch
"GeoMatch": GeoMatch
"Equal": Equal
"Contains": Contains
"LessThan": LessThan
"GreaterThan": GreaterThan
"LessThanOrEqual": LessThanOrEqual
"GreaterThanOrEqual": GreaterThanOrEqual
"BeginsWith": BeginsWith
"EndsWith": EndsWith
"RegEx": RegEx

PolicyEnabledState, PolicyEnabledStateArgs

Disabled: Disabled
Enabled: Enabled

PolicyEnabledStateDisabled: Disabled
PolicyEnabledStateEnabled: Enabled

Disabled: Disabled
Enabled: Enabled

Disabled: Disabled
Enabled: Enabled

DISABLED: Disabled
ENABLED: Enabled

"Disabled": Disabled
"Enabled": Enabled

PolicyMode, PolicyModeArgs

Prevention: Prevention
Detection: Detection

PolicyModePrevention: Prevention
PolicyModeDetection: Detection

Prevention: Prevention
Detection: Detection

Prevention: Prevention
Detection: Detection

PREVENTION: Prevention
DETECTION: Detection

"Prevention": Prevention
"Detection": Detection

PolicyRequestBodyCheck, PolicyRequestBodyCheckArgs

Disabled: Disabled
Enabled: Enabled

PolicyRequestBodyCheckDisabled: Disabled
PolicyRequestBodyCheckEnabled: Enabled

Disabled: Disabled
Enabled: Enabled

Disabled: Disabled
Enabled: Enabled

DISABLED: Disabled
ENABLED: Enabled

"Disabled": Disabled
"Enabled": Enabled

RoutingRuleLinkResponse, RoutingRuleLinkResponseArgs

Id string: Resource ID.

Id string: Resource ID.

id String: Resource ID.

id string: Resource ID.

id str: Resource ID.

id String: Resource ID.

RuleType, RuleTypeArgs

MatchRule: MatchRule
RateLimitRule: RateLimitRule

RuleTypeMatchRule: MatchRule
RuleTypeRateLimitRule: RateLimitRule

MatchRule: MatchRule
RateLimitRule: RateLimitRule

MatchRule: MatchRule
RateLimitRule: RateLimitRule

MATCH_RULE: MatchRule
RATE_LIMIT_RULE: RateLimitRule

"MatchRule": MatchRule
"RateLimitRule": RateLimitRule

SecurityPolicyLinkResponse, SecurityPolicyLinkResponseArgs

Id string: Resource ID.

Id string: Resource ID.

id String: Resource ID.

id string: Resource ID.

id str: Resource ID.

id String: Resource ID.

Sku, SkuArgs

Name string | Pulumi.AzureNative.Network.SkuName: Name of the pricing tier.

Name string | SkuName: Name of the pricing tier.

name String | SkuName: Name of the pricing tier.

name string | SkuName: Name of the pricing tier.

name str | SkuName: Name of the pricing tier.

name String | "Classic_AzureFrontDoor" | "Standard_AzureFrontDoor" | "Premium_AzureFrontDoor": Name of the pricing tier.

SkuName, SkuNameArgs

Classic_AzureFrontDoor: Classic_AzureFrontDoor
Standard_AzureFrontDoor: Standard_AzureFrontDoor
Premium_AzureFrontDoor: Premium_AzureFrontDoor

SkuName_Classic_AzureFrontDoor: Classic_AzureFrontDoor
SkuName_Standard_AzureFrontDoor: Standard_AzureFrontDoor
SkuName_Premium_AzureFrontDoor: Premium_AzureFrontDoor

Classic_AzureFrontDoor: Classic_AzureFrontDoor
Standard_AzureFrontDoor: Standard_AzureFrontDoor
Premium_AzureFrontDoor: Premium_AzureFrontDoor

Classic_AzureFrontDoor: Classic_AzureFrontDoor
Standard_AzureFrontDoor: Standard_AzureFrontDoor
Premium_AzureFrontDoor: Premium_AzureFrontDoor

CLASSIC_AZURE_FRONT_DOOR: Classic_AzureFrontDoor
STANDARD_AZURE_FRONT_DOOR: Standard_AzureFrontDoor
PREMIUM_AZURE_FRONT_DOOR: Premium_AzureFrontDoor

"Classic_AzureFrontDoor": Classic_AzureFrontDoor
"Standard_AzureFrontDoor": Standard_AzureFrontDoor
"Premium_AzureFrontDoor": Premium_AzureFrontDoor

SkuResponse, SkuResponseArgs

Name string: Name of the pricing tier.

Name string: Name of the pricing tier.

name String: Name of the pricing tier.

name string: Name of the pricing tier.

name str: Name of the pricing tier.

name String: Name of the pricing tier.

TransformType, TransformTypeArgs

Lowercase: Lowercase
Uppercase: Uppercase
Trim: Trim
UrlDecode: UrlDecode
UrlEncode: UrlEncode
RemoveNulls: RemoveNulls

TransformTypeLowercase: Lowercase
TransformTypeUppercase: Uppercase
TransformTypeTrim: Trim
TransformTypeUrlDecode: UrlDecode
TransformTypeUrlEncode: UrlEncode
TransformTypeRemoveNulls: RemoveNulls

Lowercase: Lowercase
Uppercase: Uppercase
Trim: Trim
UrlDecode: UrlDecode
UrlEncode: UrlEncode
RemoveNulls: RemoveNulls

Lowercase: Lowercase
Uppercase: Uppercase
Trim: Trim
UrlDecode: UrlDecode
UrlEncode: UrlEncode
RemoveNulls: RemoveNulls

LOWERCASE: Lowercase
UPPERCASE: Uppercase
TRIM: Trim
URL_DECODE: UrlDecode
URL_ENCODE: UrlEncode
REMOVE_NULLS: RemoveNulls

"Lowercase": Lowercase
"Uppercase": Uppercase
"Trim": Trim
"UrlDecode": UrlDecode
"UrlEncode": UrlEncode
"RemoveNulls": RemoveNulls

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:network:Policy Policy1 /subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/FrontDoorWebApplicationFirewallPolicies/Policy1

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: azure-native-v1 pulumi/pulumi-azure-native
License: Apache-2.0

These are the docs for Azure Native v1. We recommenend using the latest version, Azure Native v2.

Azure Native v1 v1.104.0 published on Thursday, Jul 6, 2023 by Pulumi

pulumi/pulumi-azure-native

azure-native.network.Policy

On this page

On this page

Example Usage

Creates specific policy

Create Policy Resource

Constructor syntax

Parameters

Constructor example

Policy Resource Properties

Inputs

Outputs

Supporting Types

ActionType, ActionTypeArgs

CustomRule, CustomRuleArgs

CustomRuleEnabledState, CustomRuleEnabledStateArgs

CustomRuleList, CustomRuleListArgs

CustomRuleListResponse, CustomRuleListResponseArgs

CustomRuleResponse, CustomRuleResponseArgs

FrontDoorManagedRuleGroupOverride, FrontDoorManagedRuleGroupOverrideArgs

FrontDoorManagedRuleGroupOverrideResponse, FrontDoorManagedRuleGroupOverrideResponseArgs

FrontDoorManagedRuleOverride, FrontDoorManagedRuleOverrideArgs

FrontDoorManagedRuleOverrideResponse, FrontDoorManagedRuleOverrideResponseArgs

FrontDoorManagedRuleSet, FrontDoorManagedRuleSetArgs

FrontDoorManagedRuleSetResponse, FrontDoorManagedRuleSetResponseArgs

FrontDoorMatchCondition, FrontDoorMatchConditionArgs

FrontDoorMatchConditionResponse, FrontDoorMatchConditionResponseArgs

FrontDoorMatchVariable, FrontDoorMatchVariableArgs

FrontDoorPolicySettings, FrontDoorPolicySettingsArgs

FrontDoorPolicySettingsResponse, FrontDoorPolicySettingsResponseArgs

FrontendEndpointLinkResponse, FrontendEndpointLinkResponseArgs

ManagedRuleEnabledState, ManagedRuleEnabledStateArgs

ManagedRuleExclusion, ManagedRuleExclusionArgs

ManagedRuleExclusionMatchVariable, ManagedRuleExclusionMatchVariableArgs

ManagedRuleExclusionResponse, ManagedRuleExclusionResponseArgs

ManagedRuleExclusionSelectorMatchOperator, ManagedRuleExclusionSelectorMatchOperatorArgs

ManagedRuleSetActionType, ManagedRuleSetActionTypeArgs

ManagedRuleSetList, ManagedRuleSetListArgs

ManagedRuleSetListResponse, ManagedRuleSetListResponseArgs

Operator, OperatorArgs

PolicyEnabledState, PolicyEnabledStateArgs

PolicyMode, PolicyModeArgs

PolicyRequestBodyCheck, PolicyRequestBodyCheckArgs

RoutingRuleLinkResponse, RoutingRuleLinkResponseArgs

RuleType, RuleTypeArgs

SecurityPolicyLinkResponse, SecurityPolicyLinkResponseArgs

Sku, SkuArgs

SkuName, SkuNameArgs

SkuResponse, SkuResponseArgs

TransformType, TransformTypeArgs

Import

Package Details

On this page

On this page