Azure Native v2.63.0, Sep 24 24

This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.

Azure Native v2.63.0 published on Tuesday, Sep 24, 2024 by Pulumi

pulumi/pulumi-azure-native

azure-native.cdn.Policy

Explore with Pulumi AI

This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.

Azure Native v2.63.0 published on Tuesday, Sep 24, 2024 by Pulumi

pulumi/pulumi-azure-native

Example Usage

Creates specific policy

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var policy = new AzureNative.Cdn.Policy("policy", new()
    {
        CustomRules = new AzureNative.Cdn.Inputs.CustomRuleListArgs
        {
            Rules = new[]
            {
                new AzureNative.Cdn.Inputs.CustomRuleArgs
                {
                    Action = AzureNative.Cdn.ActionType.Block,
                    EnabledState = AzureNative.Cdn.CustomRuleEnabledState.Enabled,
                    MatchConditions = new[]
                    {
                        new AzureNative.Cdn.Inputs.MatchConditionArgs
                        {
                            MatchValue = new[]
                            {
                                "CH",
                            },
                            MatchVariable = AzureNative.Cdn.WafMatchVariable.RemoteAddr,
                            NegateCondition = false,
                            Operator = AzureNative.Cdn.Operator.GeoMatch,
                            Transforms = new() { },
                        },
                        new AzureNative.Cdn.Inputs.MatchConditionArgs
                        {
                            MatchValue = new[]
                            {
                                "windows",
                            },
                            MatchVariable = AzureNative.Cdn.WafMatchVariable.RequestHeader,
                            NegateCondition = false,
                            Operator = AzureNative.Cdn.Operator.Contains,
                            Selector = "UserAgent",
                            Transforms = new() { },
                        },
                        new AzureNative.Cdn.Inputs.MatchConditionArgs
                        {
                            MatchValue = new[]
                            {
                                "<?php",
                                "?>",
                            },
                            MatchVariable = AzureNative.Cdn.WafMatchVariable.QueryString,
                            NegateCondition = false,
                            Operator = AzureNative.Cdn.Operator.Contains,
                            Selector = "search",
                            Transforms = new[]
                            {
                                AzureNative.Cdn.TransformType.UrlDecode,
                                AzureNative.Cdn.TransformType.Lowercase,
                            },
                        },
                    },
                    Name = "CustomRule1",
                    Priority = 2,
                },
            },
        },
        Location = "global",
        ManagedRules = new AzureNative.Cdn.Inputs.ManagedRuleSetListArgs
        {
            ManagedRuleSets = new[]
            {
                new AzureNative.Cdn.Inputs.ManagedRuleSetArgs
                {
                    RuleGroupOverrides = new[]
                    {
                        new AzureNative.Cdn.Inputs.ManagedRuleGroupOverrideArgs
                        {
                            RuleGroupName = "Group1",
                            Rules = new[]
                            {
                                new AzureNative.Cdn.Inputs.ManagedRuleOverrideArgs
                                {
                                    Action = AzureNative.Cdn.ActionType.Redirect,
                                    EnabledState = AzureNative.Cdn.ManagedRuleEnabledState.Enabled,
                                    RuleId = "GROUP1-0001",
                                },
                                new AzureNative.Cdn.Inputs.ManagedRuleOverrideArgs
                                {
                                    EnabledState = AzureNative.Cdn.ManagedRuleEnabledState.Disabled,
                                    RuleId = "GROUP1-0002",
                                },
                            },
                        },
                    },
                    RuleSetType = "DefaultRuleSet",
                    RuleSetVersion = "preview-1.0",
                },
            },
        },
        PolicyName = "MicrosoftCdnWafPolicy",
        PolicySettings = new AzureNative.Cdn.Inputs.PolicySettingsArgs
        {
            DefaultCustomBlockResponseBody = "PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==",
            DefaultCustomBlockResponseStatusCode = 200,
            DefaultRedirectUrl = "http://www.bing.com",
        },
        RateLimitRules = new AzureNative.Cdn.Inputs.RateLimitRuleListArgs
        {
            Rules = new[]
            {
                new AzureNative.Cdn.Inputs.RateLimitRuleArgs
                {
                    Action = AzureNative.Cdn.ActionType.Block,
                    EnabledState = AzureNative.Cdn.CustomRuleEnabledState.Enabled,
                    MatchConditions = new[]
                    {
                        new AzureNative.Cdn.Inputs.MatchConditionArgs
                        {
                            MatchValue = new[]
                            {
                                "192.168.1.0/24",
                                "10.0.0.0/24",
                            },
                            MatchVariable = AzureNative.Cdn.WafMatchVariable.RemoteAddr,
                            NegateCondition = false,
                            Operator = AzureNative.Cdn.Operator.IPMatch,
                            Transforms = new() { },
                        },
                    },
                    Name = "RateLimitRule1",
                    Priority = 1,
                    RateLimitDurationInMinutes = 0,
                    RateLimitThreshold = 1000,
                },
            },
        },
        ResourceGroupName = "rg1",
        Sku = new AzureNative.Cdn.Inputs.SkuArgs
        {
            Name = AzureNative.Cdn.SkuName.Standard_Microsoft,
        },
    });

});

package main

import (
	cdn "github.com/pulumi/pulumi-azure-native-sdk/cdn/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cdn.NewPolicy(ctx, "policy", &cdn.PolicyArgs{
			CustomRules: &cdn.CustomRuleListArgs{
				Rules: cdn.CustomRuleArray{
					&cdn.CustomRuleArgs{
						Action:       pulumi.String(cdn.ActionTypeBlock),
						EnabledState: pulumi.String(cdn.CustomRuleEnabledStateEnabled),
						MatchConditions: cdn.MatchConditionArray{
							&cdn.MatchConditionArgs{
								MatchValue: pulumi.StringArray{
									pulumi.String("CH"),
								},
								MatchVariable:   pulumi.String(cdn.WafMatchVariableRemoteAddr),
								NegateCondition: pulumi.Bool(false),
								Operator:        pulumi.String(cdn.OperatorGeoMatch),
								Transforms:      pulumi.StringArray{},
							},
							&cdn.MatchConditionArgs{
								MatchValue: pulumi.StringArray{
									pulumi.String("windows"),
								},
								MatchVariable:   pulumi.String(cdn.WafMatchVariableRequestHeader),
								NegateCondition: pulumi.Bool(false),
								Operator:        pulumi.String(cdn.OperatorContains),
								Selector:        pulumi.String("UserAgent"),
								Transforms:      pulumi.StringArray{},
							},
							&cdn.MatchConditionArgs{
								MatchValue: pulumi.StringArray{
									pulumi.String("<?php"),
									pulumi.String("?>"),
								},
								MatchVariable:   pulumi.String(cdn.WafMatchVariableQueryString),
								NegateCondition: pulumi.Bool(false),
								Operator:        pulumi.String(cdn.OperatorContains),
								Selector:        pulumi.String("search"),
								Transforms: pulumi.StringArray{
									pulumi.String(cdn.TransformTypeUrlDecode),
									pulumi.String(cdn.TransformTypeLowercase),
								},
							},
						},
						Name:     pulumi.String("CustomRule1"),
						Priority: pulumi.Int(2),
					},
				},
			},
			Location: pulumi.String("global"),
			ManagedRules: &cdn.ManagedRuleSetListArgs{
				ManagedRuleSets: cdn.ManagedRuleSetArray{
					&cdn.ManagedRuleSetArgs{
						RuleGroupOverrides: cdn.ManagedRuleGroupOverrideArray{
							&cdn.ManagedRuleGroupOverrideArgs{
								RuleGroupName: pulumi.String("Group1"),
								Rules: cdn.ManagedRuleOverrideArray{
									&cdn.ManagedRuleOverrideArgs{
										Action:       pulumi.String(cdn.ActionTypeRedirect),
										EnabledState: pulumi.String(cdn.ManagedRuleEnabledStateEnabled),
										RuleId:       pulumi.String("GROUP1-0001"),
									},
									&cdn.ManagedRuleOverrideArgs{
										EnabledState: pulumi.String(cdn.ManagedRuleEnabledStateDisabled),
										RuleId:       pulumi.String("GROUP1-0002"),
									},
								},
							},
						},
						RuleSetType:    pulumi.String("DefaultRuleSet"),
						RuleSetVersion: pulumi.String("preview-1.0"),
					},
				},
			},
			PolicyName: pulumi.String("MicrosoftCdnWafPolicy"),
			PolicySettings: &cdn.PolicySettingsArgs{
				DefaultCustomBlockResponseBody:       pulumi.String("PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg=="),
				DefaultCustomBlockResponseStatusCode: pulumi.Int(200),
				DefaultRedirectUrl:                   pulumi.String("http://www.bing.com"),
			},
			RateLimitRules: &cdn.RateLimitRuleListArgs{
				Rules: cdn.RateLimitRuleArray{
					&cdn.RateLimitRuleArgs{
						Action:       pulumi.String(cdn.ActionTypeBlock),
						EnabledState: pulumi.String(cdn.CustomRuleEnabledStateEnabled),
						MatchConditions: cdn.MatchConditionArray{
							&cdn.MatchConditionArgs{
								MatchValue: pulumi.StringArray{
									pulumi.String("192.168.1.0/24"),
									pulumi.String("10.0.0.0/24"),
								},
								MatchVariable:   pulumi.String(cdn.WafMatchVariableRemoteAddr),
								NegateCondition: pulumi.Bool(false),
								Operator:        pulumi.String(cdn.OperatorIPMatch),
								Transforms:      pulumi.StringArray{},
							},
						},
						Name:                       pulumi.String("RateLimitRule1"),
						Priority:                   pulumi.Int(1),
						RateLimitDurationInMinutes: pulumi.Int(0),
						RateLimitThreshold:         pulumi.Int(1000),
					},
				},
			},
			ResourceGroupName: pulumi.String("rg1"),
			Sku: &cdn.SkuArgs{
				Name: pulumi.String(cdn.SkuName_Standard_Microsoft),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.cdn.Policy;
import com.pulumi.azurenative.cdn.PolicyArgs;
import com.pulumi.azurenative.cdn.inputs.CustomRuleListArgs;
import com.pulumi.azurenative.cdn.inputs.ManagedRuleSetListArgs;
import com.pulumi.azurenative.cdn.inputs.PolicySettingsArgs;
import com.pulumi.azurenative.cdn.inputs.RateLimitRuleListArgs;
import com.pulumi.azurenative.cdn.inputs.SkuArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var policy = new Policy("policy", PolicyArgs.builder()
            .customRules(CustomRuleListArgs.builder()
                .rules(CustomRuleArgs.builder()
                    .action("Block")
                    .enabledState("Enabled")
                    .matchConditions(                    
                        MatchConditionArgs.builder()
                            .matchValue("CH")
                            .matchVariable("RemoteAddr")
                            .negateCondition(false)
                            .operator("GeoMatch")
                            .transforms()
                            .build(),
                        MatchConditionArgs.builder()
                            .matchValue("windows")
                            .matchVariable("RequestHeader")
                            .negateCondition(false)
                            .operator("Contains")
                            .selector("UserAgent")
                            .transforms()
                            .build(),
                        MatchConditionArgs.builder()
                            .matchValue(                            
                                "<?php",
                                "?>")
                            .matchVariable("QueryString")
                            .negateCondition(false)
                            .operator("Contains")
                            .selector("search")
                            .transforms(                            
                                "UrlDecode",
                                "Lowercase")
                            .build())
                    .name("CustomRule1")
                    .priority(2)
                    .build())
                .build())
            .location("global")
            .managedRules(ManagedRuleSetListArgs.builder()
                .managedRuleSets(ManagedRuleSetArgs.builder()
                    .ruleGroupOverrides(ManagedRuleGroupOverrideArgs.builder()
                        .ruleGroupName("Group1")
                        .rules(                        
                            ManagedRuleOverrideArgs.builder()
                                .action("Redirect")
                                .enabledState("Enabled")
                                .ruleId("GROUP1-0001")
                                .build(),
                            ManagedRuleOverrideArgs.builder()
                                .enabledState("Disabled")
                                .ruleId("GROUP1-0002")
                                .build())
                        .build())
                    .ruleSetType("DefaultRuleSet")
                    .ruleSetVersion("preview-1.0")
                    .build())
                .build())
            .policyName("MicrosoftCdnWafPolicy")
            .policySettings(PolicySettingsArgs.builder()
                .defaultCustomBlockResponseBody("PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==")
                .defaultCustomBlockResponseStatusCode(200)
                .defaultRedirectUrl("http://www.bing.com")
                .build())
            .rateLimitRules(RateLimitRuleListArgs.builder()
                .rules(RateLimitRuleArgs.builder()
                    .action("Block")
                    .enabledState("Enabled")
                    .matchConditions(MatchConditionArgs.builder()
                        .matchValue(                        
                            "192.168.1.0/24",
                            "10.0.0.0/24")
                        .matchVariable("RemoteAddr")
                        .negateCondition(false)
                        .operator("IPMatch")
                        .transforms()
                        .build())
                    .name("RateLimitRule1")
                    .priority(1)
                    .rateLimitDurationInMinutes(0)
                    .rateLimitThreshold(1000)
                    .build())
                .build())
            .resourceGroupName("rg1")
            .sku(SkuArgs.builder()
                .name("Standard_Microsoft")
                .build())
            .build());

    }
}

import pulumi
import pulumi_azure_native as azure_native

policy = azure_native.cdn.Policy("policy",
    custom_rules={
        "rules": [{
            "action": azure_native.cdn.ActionType.BLOCK,
            "enabled_state": azure_native.cdn.CustomRuleEnabledState.ENABLED,
            "match_conditions": [
                {
                    "match_value": ["CH"],
                    "match_variable": azure_native.cdn.WafMatchVariable.REMOTE_ADDR,
                    "negate_condition": False,
                    "operator": azure_native.cdn.Operator.GEO_MATCH,
                    "transforms": [],
                },
                {
                    "match_value": ["windows"],
                    "match_variable": azure_native.cdn.WafMatchVariable.REQUEST_HEADER,
                    "negate_condition": False,
                    "operator": azure_native.cdn.Operator.CONTAINS,
                    "selector": "UserAgent",
                    "transforms": [],
                },
                {
                    "match_value": [
                        "<?php",
                        "?>",
                    ],
                    "match_variable": azure_native.cdn.WafMatchVariable.QUERY_STRING,
                    "negate_condition": False,
                    "operator": azure_native.cdn.Operator.CONTAINS,
                    "selector": "search",
                    "transforms": [
                        azure_native.cdn.TransformType.URL_DECODE,
                        azure_native.cdn.TransformType.LOWERCASE,
                    ],
                },
            ],
            "name": "CustomRule1",
            "priority": 2,
        }],
    },
    location="global",
    managed_rules={
        "managed_rule_sets": [{
            "rule_group_overrides": [{
                "rule_group_name": "Group1",
                "rules": [
                    {
                        "action": azure_native.cdn.ActionType.REDIRECT,
                        "enabled_state": azure_native.cdn.ManagedRuleEnabledState.ENABLED,
                        "rule_id": "GROUP1-0001",
                    },
                    {
                        "enabled_state": azure_native.cdn.ManagedRuleEnabledState.DISABLED,
                        "rule_id": "GROUP1-0002",
                    },
                ],
            }],
            "rule_set_type": "DefaultRuleSet",
            "rule_set_version": "preview-1.0",
        }],
    },
    policy_name="MicrosoftCdnWafPolicy",
    policy_settings={
        "default_custom_block_response_body": "PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==",
        "default_custom_block_response_status_code": 200,
        "default_redirect_url": "http://www.bing.com",
    },
    rate_limit_rules={
        "rules": [{
            "action": azure_native.cdn.ActionType.BLOCK,
            "enabled_state": azure_native.cdn.CustomRuleEnabledState.ENABLED,
            "match_conditions": [{
                "match_value": [
                    "192.168.1.0/24",
                    "10.0.0.0/24",
                ],
                "match_variable": azure_native.cdn.WafMatchVariable.REMOTE_ADDR,
                "negate_condition": False,
                "operator": azure_native.cdn.Operator.IP_MATCH,
                "transforms": [],
            }],
            "name": "RateLimitRule1",
            "priority": 1,
            "rate_limit_duration_in_minutes": 0,
            "rate_limit_threshold": 1000,
        }],
    },
    resource_group_name="rg1",
    sku={
        "name": azure_native.cdn.SkuName.STANDARD_MICROSOFT,
    })

import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const policy = new azure_native.cdn.Policy("policy", {
    customRules: {
        rules: [{
            action: azure_native.cdn.ActionType.Block,
            enabledState: azure_native.cdn.CustomRuleEnabledState.Enabled,
            matchConditions: [
                {
                    matchValue: ["CH"],
                    matchVariable: azure_native.cdn.WafMatchVariable.RemoteAddr,
                    negateCondition: false,
                    operator: azure_native.cdn.Operator.GeoMatch,
                    transforms: [],
                },
                {
                    matchValue: ["windows"],
                    matchVariable: azure_native.cdn.WafMatchVariable.RequestHeader,
                    negateCondition: false,
                    operator: azure_native.cdn.Operator.Contains,
                    selector: "UserAgent",
                    transforms: [],
                },
                {
                    matchValue: [
                        "<?php",
                        "?>",
                    ],
                    matchVariable: azure_native.cdn.WafMatchVariable.QueryString,
                    negateCondition: false,
                    operator: azure_native.cdn.Operator.Contains,
                    selector: "search",
                    transforms: [
                        azure_native.cdn.TransformType.UrlDecode,
                        azure_native.cdn.TransformType.Lowercase,
                    ],
                },
            ],
            name: "CustomRule1",
            priority: 2,
        }],
    },
    location: "global",
    managedRules: {
        managedRuleSets: [{
            ruleGroupOverrides: [{
                ruleGroupName: "Group1",
                rules: [
                    {
                        action: azure_native.cdn.ActionType.Redirect,
                        enabledState: azure_native.cdn.ManagedRuleEnabledState.Enabled,
                        ruleId: "GROUP1-0001",
                    },
                    {
                        enabledState: azure_native.cdn.ManagedRuleEnabledState.Disabled,
                        ruleId: "GROUP1-0002",
                    },
                ],
            }],
            ruleSetType: "DefaultRuleSet",
            ruleSetVersion: "preview-1.0",
        }],
    },
    policyName: "MicrosoftCdnWafPolicy",
    policySettings: {
        defaultCustomBlockResponseBody: "PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==",
        defaultCustomBlockResponseStatusCode: 200,
        defaultRedirectUrl: "http://www.bing.com",
    },
    rateLimitRules: {
        rules: [{
            action: azure_native.cdn.ActionType.Block,
            enabledState: azure_native.cdn.CustomRuleEnabledState.Enabled,
            matchConditions: [{
                matchValue: [
                    "192.168.1.0/24",
                    "10.0.0.0/24",
                ],
                matchVariable: azure_native.cdn.WafMatchVariable.RemoteAddr,
                negateCondition: false,
                operator: azure_native.cdn.Operator.IPMatch,
                transforms: [],
            }],
            name: "RateLimitRule1",
            priority: 1,
            rateLimitDurationInMinutes: 0,
            rateLimitThreshold: 1000,
        }],
    },
    resourceGroupName: "rg1",
    sku: {
        name: azure_native.cdn.SkuName.Standard_Microsoft,
    },
});

resources:
  policy:
    type: azure-native:cdn:Policy
    properties:
      customRules:
        rules:
          - action: Block
            enabledState: Enabled
            matchConditions:
              - matchValue:
                  - CH
                matchVariable: RemoteAddr
                negateCondition: false
                operator: GeoMatch
                transforms: []
              - matchValue:
                  - windows
                matchVariable: RequestHeader
                negateCondition: false
                operator: Contains
                selector: UserAgent
                transforms: []
              - matchValue:
                  - <?php
                  - ?>
                matchVariable: QueryString
                negateCondition: false
                operator: Contains
                selector: search
                transforms:
                  - UrlDecode
                  - Lowercase                
            name: CustomRule1
            priority: 2
      location: global
      managedRules:
        managedRuleSets:
          - ruleGroupOverrides:
              - ruleGroupName: Group1
                rules:
                  - action: Redirect
                    enabledState: Enabled
                    ruleId: GROUP1-0001
                  - enabledState: Disabled
                    ruleId: GROUP1-0002
            ruleSetType: DefaultRuleSet
            ruleSetVersion: preview-1.0
      policyName: MicrosoftCdnWafPolicy
      policySettings:
        defaultCustomBlockResponseBody: PGh0bWw+CjxoZWFkZXI+PHRpdGxlPkhlbGxvPC90aXRsZT48L2hlYWRlcj4KPGJvZHk+CkhlbGxvIHdvcmxkCjwvYm9keT4KPC9odG1sPg==
        defaultCustomBlockResponseStatusCode: 200
        defaultRedirectUrl: http://www.bing.com
      rateLimitRules:
        rules:
          - action: Block
            enabledState: Enabled
            matchConditions:
              - matchValue:
                  - 192.168.1.0/24
                  - 10.0.0.0/24
                matchVariable: RemoteAddr
                negateCondition: false
                operator: IPMatch
                transforms: []
            name: RateLimitRule1
            priority: 1
            rateLimitDurationInMinutes: 0
            rateLimitThreshold: 1000
      resourceGroupName: rg1
      sku:
        name: Standard_Microsoft

Create Policy Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Policy(name: string, args: PolicyArgs, opts?: CustomResourceOptions);

@overload
def Policy(resource_name: str,
           args: PolicyArgs,
           opts: Optional[ResourceOptions] = None)

@overload
def Policy(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           resource_group_name: Optional[str] = None,
           sku: Optional[SkuArgs] = None,
           custom_rules: Optional[CustomRuleListArgs] = None,
           extended_properties: Optional[Mapping[str, str]] = None,
           location: Optional[str] = None,
           managed_rules: Optional[ManagedRuleSetListArgs] = None,
           policy_name: Optional[str] = None,
           policy_settings: Optional[PolicySettingsArgs] = None,
           rate_limit_rules: Optional[RateLimitRuleListArgs] = None,
           tags: Optional[Mapping[str, str]] = None)

func NewPolicy(ctx *Context, name string, args PolicyArgs, opts ...ResourceOption) (*Policy, error)

public Policy(string name, PolicyArgs args, CustomResourceOptions? opts = null)

public Policy(String name, PolicyArgs args)
public Policy(String name, PolicyArgs args, CustomResourceOptions options)

type: azure-native:cdn:Policy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args PolicyArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args PolicyArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args PolicyArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args PolicyArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args PolicyArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var azure_nativePolicyResource = new AzureNative.Cdn.Policy("azure-nativePolicyResource", new()
{
    ResourceGroupName = "string",
    Sku = new AzureNative.Cdn.Inputs.SkuArgs
    {
        Name = "string",
    },
    CustomRules = new AzureNative.Cdn.Inputs.CustomRuleListArgs
    {
        Rules = new[]
        {
            new AzureNative.Cdn.Inputs.CustomRuleArgs
            {
                Action = "string",
                MatchConditions = new[]
                {
                    new AzureNative.Cdn.Inputs.MatchConditionArgs
                    {
                        MatchValue = new[]
                        {
                            "string",
                        },
                        MatchVariable = "string",
                        Operator = "string",
                        NegateCondition = false,
                        Selector = "string",
                        Transforms = new[]
                        {
                            "string",
                        },
                    },
                },
                Name = "string",
                Priority = 0,
                EnabledState = "string",
            },
        },
    },
    ExtendedProperties = 
    {
        { "string", "string" },
    },
    Location = "string",
    ManagedRules = new AzureNative.Cdn.Inputs.ManagedRuleSetListArgs
    {
        ManagedRuleSets = new[]
        {
            new AzureNative.Cdn.Inputs.ManagedRuleSetArgs
            {
                RuleSetType = "string",
                RuleSetVersion = "string",
                AnomalyScore = 0,
                RuleGroupOverrides = new[]
                {
                    new AzureNative.Cdn.Inputs.ManagedRuleGroupOverrideArgs
                    {
                        RuleGroupName = "string",
                        Rules = new[]
                        {
                            new AzureNative.Cdn.Inputs.ManagedRuleOverrideArgs
                            {
                                RuleId = "string",
                                Action = "string",
                                EnabledState = "string",
                            },
                        },
                    },
                },
            },
        },
    },
    PolicyName = "string",
    PolicySettings = new AzureNative.Cdn.Inputs.PolicySettingsArgs
    {
        DefaultCustomBlockResponseBody = "string",
        DefaultCustomBlockResponseStatusCode = 0,
        DefaultRedirectUrl = "string",
        EnabledState = "string",
        Mode = "string",
    },
    RateLimitRules = new AzureNative.Cdn.Inputs.RateLimitRuleListArgs
    {
        Rules = new[]
        {
            new AzureNative.Cdn.Inputs.RateLimitRuleArgs
            {
                Action = "string",
                MatchConditions = new[]
                {
                    new AzureNative.Cdn.Inputs.MatchConditionArgs
                    {
                        MatchValue = new[]
                        {
                            "string",
                        },
                        MatchVariable = "string",
                        Operator = "string",
                        NegateCondition = false,
                        Selector = "string",
                        Transforms = new[]
                        {
                            "string",
                        },
                    },
                },
                Name = "string",
                Priority = 0,
                RateLimitDurationInMinutes = 0,
                RateLimitThreshold = 0,
                EnabledState = "string",
            },
        },
    },
    Tags = 
    {
        { "string", "string" },
    },
});

example, err := cdn.NewPolicy(ctx, "azure-nativePolicyResource", &cdn.PolicyArgs{
	ResourceGroupName: pulumi.String("string"),
	Sku: &cdn.SkuArgs{
		Name: pulumi.String("string"),
	},
	CustomRules: &cdn.CustomRuleListArgs{
		Rules: cdn.CustomRuleArray{
			&cdn.CustomRuleArgs{
				Action: pulumi.String("string"),
				MatchConditions: cdn.MatchConditionArray{
					&cdn.MatchConditionArgs{
						MatchValue: pulumi.StringArray{
							pulumi.String("string"),
						},
						MatchVariable:   pulumi.String("string"),
						Operator:        pulumi.String("string"),
						NegateCondition: pulumi.Bool(false),
						Selector:        pulumi.String("string"),
						Transforms: pulumi.StringArray{
							pulumi.String("string"),
						},
					},
				},
				Name:         pulumi.String("string"),
				Priority:     pulumi.Int(0),
				EnabledState: pulumi.String("string"),
			},
		},
	},
	ExtendedProperties: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Location: pulumi.String("string"),
	ManagedRules: &cdn.ManagedRuleSetListArgs{
		ManagedRuleSets: cdn.ManagedRuleSetArray{
			&cdn.ManagedRuleSetArgs{
				RuleSetType:    pulumi.String("string"),
				RuleSetVersion: pulumi.String("string"),
				AnomalyScore:   pulumi.Int(0),
				RuleGroupOverrides: cdn.ManagedRuleGroupOverrideArray{
					&cdn.ManagedRuleGroupOverrideArgs{
						RuleGroupName: pulumi.String("string"),
						Rules: cdn.ManagedRuleOverrideArray{
							&cdn.ManagedRuleOverrideArgs{
								RuleId:       pulumi.String("string"),
								Action:       pulumi.String("string"),
								EnabledState: pulumi.String("string"),
							},
						},
					},
				},
			},
		},
	},
	PolicyName: pulumi.String("string"),
	PolicySettings: &cdn.PolicySettingsArgs{
		DefaultCustomBlockResponseBody:       pulumi.String("string"),
		DefaultCustomBlockResponseStatusCode: pulumi.Int(0),
		DefaultRedirectUrl:                   pulumi.String("string"),
		EnabledState:                         pulumi.String("string"),
		Mode:                                 pulumi.String("string"),
	},
	RateLimitRules: &cdn.RateLimitRuleListArgs{
		Rules: cdn.RateLimitRuleArray{
			&cdn.RateLimitRuleArgs{
				Action: pulumi.String("string"),
				MatchConditions: cdn.MatchConditionArray{
					&cdn.MatchConditionArgs{
						MatchValue: pulumi.StringArray{
							pulumi.String("string"),
						},
						MatchVariable:   pulumi.String("string"),
						Operator:        pulumi.String("string"),
						NegateCondition: pulumi.Bool(false),
						Selector:        pulumi.String("string"),
						Transforms: pulumi.StringArray{
							pulumi.String("string"),
						},
					},
				},
				Name:                       pulumi.String("string"),
				Priority:                   pulumi.Int(0),
				RateLimitDurationInMinutes: pulumi.Int(0),
				RateLimitThreshold:         pulumi.Int(0),
				EnabledState:               pulumi.String("string"),
			},
		},
	},
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
})

var azure_nativePolicyResource = new Policy("azure-nativePolicyResource", PolicyArgs.builder()
    .resourceGroupName("string")
    .sku(SkuArgs.builder()
        .name("string")
        .build())
    .customRules(CustomRuleListArgs.builder()
        .rules(CustomRuleArgs.builder()
            .action("string")
            .matchConditions(MatchConditionArgs.builder()
                .matchValue("string")
                .matchVariable("string")
                .operator("string")
                .negateCondition(false)
                .selector("string")
                .transforms("string")
                .build())
            .name("string")
            .priority(0)
            .enabledState("string")
            .build())
        .build())
    .extendedProperties(Map.of("string", "string"))
    .location("string")
    .managedRules(ManagedRuleSetListArgs.builder()
        .managedRuleSets(ManagedRuleSetArgs.builder()
            .ruleSetType("string")
            .ruleSetVersion("string")
            .anomalyScore(0)
            .ruleGroupOverrides(ManagedRuleGroupOverrideArgs.builder()
                .ruleGroupName("string")
                .rules(ManagedRuleOverrideArgs.builder()
                    .ruleId("string")
                    .action("string")
                    .enabledState("string")
                    .build())
                .build())
            .build())
        .build())
    .policyName("string")
    .policySettings(PolicySettingsArgs.builder()
        .defaultCustomBlockResponseBody("string")
        .defaultCustomBlockResponseStatusCode(0)
        .defaultRedirectUrl("string")
        .enabledState("string")
        .mode("string")
        .build())
    .rateLimitRules(RateLimitRuleListArgs.builder()
        .rules(RateLimitRuleArgs.builder()
            .action("string")
            .matchConditions(MatchConditionArgs.builder()
                .matchValue("string")
                .matchVariable("string")
                .operator("string")
                .negateCondition(false)
                .selector("string")
                .transforms("string")
                .build())
            .name("string")
            .priority(0)
            .rateLimitDurationInMinutes(0)
            .rateLimitThreshold(0)
            .enabledState("string")
            .build())
        .build())
    .tags(Map.of("string", "string"))
    .build());

azure_native_policy_resource = azure_native.cdn.Policy("azure-nativePolicyResource",
    resource_group_name="string",
    sku={
        "name": "string",
    },
    custom_rules={
        "rules": [{
            "action": "string",
            "matchConditions": [{
                "matchValue": ["string"],
                "matchVariable": "string",
                "operator": "string",
                "negateCondition": False,
                "selector": "string",
                "transforms": ["string"],
            }],
            "name": "string",
            "priority": 0,
            "enabledState": "string",
        }],
    },
    extended_properties={
        "string": "string",
    },
    location="string",
    managed_rules={
        "managedRuleSets": [{
            "ruleSetType": "string",
            "ruleSetVersion": "string",
            "anomalyScore": 0,
            "ruleGroupOverrides": [{
                "ruleGroupName": "string",
                "rules": [{
                    "ruleId": "string",
                    "action": "string",
                    "enabledState": "string",
                }],
            }],
        }],
    },
    policy_name="string",
    policy_settings={
        "defaultCustomBlockResponseBody": "string",
        "defaultCustomBlockResponseStatusCode": 0,
        "defaultRedirectUrl": "string",
        "enabledState": "string",
        "mode": "string",
    },
    rate_limit_rules={
        "rules": [{
            "action": "string",
            "matchConditions": [{
                "matchValue": ["string"],
                "matchVariable": "string",
                "operator": "string",
                "negateCondition": False,
                "selector": "string",
                "transforms": ["string"],
            }],
            "name": "string",
            "priority": 0,
            "rateLimitDurationInMinutes": 0,
            "rateLimitThreshold": 0,
            "enabledState": "string",
        }],
    },
    tags={
        "string": "string",
    })

const azure_nativePolicyResource = new azure_native.cdn.Policy("azure-nativePolicyResource", {
    resourceGroupName: "string",
    sku: {
        name: "string",
    },
    customRules: {
        rules: [{
            action: "string",
            matchConditions: [{
                matchValue: ["string"],
                matchVariable: "string",
                operator: "string",
                negateCondition: false,
                selector: "string",
                transforms: ["string"],
            }],
            name: "string",
            priority: 0,
            enabledState: "string",
        }],
    },
    extendedProperties: {
        string: "string",
    },
    location: "string",
    managedRules: {
        managedRuleSets: [{
            ruleSetType: "string",
            ruleSetVersion: "string",
            anomalyScore: 0,
            ruleGroupOverrides: [{
                ruleGroupName: "string",
                rules: [{
                    ruleId: "string",
                    action: "string",
                    enabledState: "string",
                }],
            }],
        }],
    },
    policyName: "string",
    policySettings: {
        defaultCustomBlockResponseBody: "string",
        defaultCustomBlockResponseStatusCode: 0,
        defaultRedirectUrl: "string",
        enabledState: "string",
        mode: "string",
    },
    rateLimitRules: {
        rules: [{
            action: "string",
            matchConditions: [{
                matchValue: ["string"],
                matchVariable: "string",
                operator: "string",
                negateCondition: false,
                selector: "string",
                transforms: ["string"],
            }],
            name: "string",
            priority: 0,
            rateLimitDurationInMinutes: 0,
            rateLimitThreshold: 0,
            enabledState: "string",
        }],
    },
    tags: {
        string: "string",
    },
});

type: azure-native:cdn:Policy
properties:
    customRules:
        rules:
            - action: string
              enabledState: string
              matchConditions:
                - matchValue:
                    - string
                  matchVariable: string
                  negateCondition: false
                  operator: string
                  selector: string
                  transforms:
                    - string
              name: string
              priority: 0
    extendedProperties:
        string: string
    location: string
    managedRules:
        managedRuleSets:
            - anomalyScore: 0
              ruleGroupOverrides:
                - ruleGroupName: string
                  rules:
                    - action: string
                      enabledState: string
                      ruleId: string
              ruleSetType: string
              ruleSetVersion: string
    policyName: string
    policySettings:
        defaultCustomBlockResponseBody: string
        defaultCustomBlockResponseStatusCode: 0
        defaultRedirectUrl: string
        enabledState: string
        mode: string
    rateLimitRules:
        rules:
            - action: string
              enabledState: string
              matchConditions:
                - matchValue:
                    - string
                  matchVariable: string
                  negateCondition: false
                  operator: string
                  selector: string
                  transforms:
                    - string
              name: string
              priority: 0
              rateLimitDurationInMinutes: 0
              rateLimitThreshold: 0
    resourceGroupName: string
    sku:
        name: string
    tags:
        string: string

Policy Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The Policy resource accepts the following input properties:

ResourceGroupName string: Name of the Resource group within the Azure subscription.
Sku Pulumi.AzureNative.Cdn.Inputs.Sku: The pricing tier (defines a CDN provider, feature list and rate) of the CdnWebApplicationFirewallPolicy.
CustomRules Pulumi.AzureNative.Cdn.Inputs.CustomRuleList: Describes custom rules inside the policy.
ExtendedProperties Dictionary<string, string>: Key-Value pair representing additional properties for Web Application Firewall policy.
Location string: Resource location.
ManagedRules Pulumi.AzureNative.Cdn.Inputs.ManagedRuleSetList: Describes managed rules inside the policy.
PolicyName string: The name of the CdnWebApplicationFirewallPolicy.
PolicySettings Pulumi.AzureNative.Cdn.Inputs.PolicySettings: Describes policySettings for policy
RateLimitRules Pulumi.AzureNative.Cdn.Inputs.RateLimitRuleList: Describes rate limit rules inside the policy.
Tags Dictionary<string, string>: Resource tags.

ResourceGroupName string: Name of the Resource group within the Azure subscription.
Sku SkuArgs: The pricing tier (defines a CDN provider, feature list and rate) of the CdnWebApplicationFirewallPolicy.
CustomRules CustomRuleListArgs: Describes custom rules inside the policy.
ExtendedProperties map[string]string: Key-Value pair representing additional properties for Web Application Firewall policy.
Location string: Resource location.
ManagedRules ManagedRuleSetListArgs: Describes managed rules inside the policy.
PolicyName string: The name of the CdnWebApplicationFirewallPolicy.
PolicySettings PolicySettingsArgs: Describes policySettings for policy
RateLimitRules RateLimitRuleListArgs: Describes rate limit rules inside the policy.
Tags map[string]string: Resource tags.

resourceGroupName String: Name of the Resource group within the Azure subscription.
sku Sku: The pricing tier (defines a CDN provider, feature list and rate) of the CdnWebApplicationFirewallPolicy.
customRules CustomRuleList: Describes custom rules inside the policy.
extendedProperties Map<String,String>: Key-Value pair representing additional properties for Web Application Firewall policy.
location String: Resource location.
managedRules ManagedRuleSetList: Describes managed rules inside the policy.
policyName String: The name of the CdnWebApplicationFirewallPolicy.
policySettings PolicySettings: Describes policySettings for policy
rateLimitRules RateLimitRuleList: Describes rate limit rules inside the policy.
tags Map<String,String>: Resource tags.

resourceGroupName string: Name of the Resource group within the Azure subscription.
sku Sku: The pricing tier (defines a CDN provider, feature list and rate) of the CdnWebApplicationFirewallPolicy.
customRules CustomRuleList: Describes custom rules inside the policy.
extendedProperties {[key: string]: string}: Key-Value pair representing additional properties for Web Application Firewall policy.
location string: Resource location.
managedRules ManagedRuleSetList: Describes managed rules inside the policy.
policyName string: The name of the CdnWebApplicationFirewallPolicy.
policySettings PolicySettings: Describes policySettings for policy
rateLimitRules RateLimitRuleList: Describes rate limit rules inside the policy.
tags {[key: string]: string}: Resource tags.

resource_group_name str: Name of the Resource group within the Azure subscription.
sku SkuArgs: The pricing tier (defines a CDN provider, feature list and rate) of the CdnWebApplicationFirewallPolicy.
custom_rules CustomRuleListArgs: Describes custom rules inside the policy.
extended_properties Mapping[str, str]: Key-Value pair representing additional properties for Web Application Firewall policy.
location str: Resource location.
managed_rules ManagedRuleSetListArgs: Describes managed rules inside the policy.
policy_name str: The name of the CdnWebApplicationFirewallPolicy.
policy_settings PolicySettingsArgs: Describes policySettings for policy
rate_limit_rules RateLimitRuleListArgs: Describes rate limit rules inside the policy.
tags Mapping[str, str]: Resource tags.

resourceGroupName String: Name of the Resource group within the Azure subscription.
sku Property Map: The pricing tier (defines a CDN provider, feature list and rate) of the CdnWebApplicationFirewallPolicy.
customRules Property Map: Describes custom rules inside the policy.
extendedProperties Map<String>: Key-Value pair representing additional properties for Web Application Firewall policy.
location String: Resource location.
managedRules Property Map: Describes managed rules inside the policy.
policyName String: The name of the CdnWebApplicationFirewallPolicy.
policySettings Property Map: Describes policySettings for policy
rateLimitRules Property Map: Describes rate limit rules inside the policy.
tags Map<String>: Resource tags.

Outputs

All input properties are implicitly available as output properties. Additionally, the Policy resource produces the following output properties:

EndpointLinks List<Pulumi.AzureNative.Cdn.Outputs.CdnEndpointResponse>: Describes Azure CDN endpoints associated with this Web Application Firewall policy.
Id string: The provider-assigned unique ID for this managed resource.
Name string: Resource name.
ProvisioningState string: Provisioning state of the WebApplicationFirewallPolicy.
ResourceState string
SystemData Pulumi.AzureNative.Cdn.Outputs.SystemDataResponse: Read only system data
Type string: Resource type.
Etag string: Gets a unique read-only string that changes whenever the resource is updated.

EndpointLinks []CdnEndpointResponse: Describes Azure CDN endpoints associated with this Web Application Firewall policy.
Id string: The provider-assigned unique ID for this managed resource.
Name string: Resource name.
ProvisioningState string: Provisioning state of the WebApplicationFirewallPolicy.
ResourceState string
SystemData SystemDataResponse: Read only system data
Type string: Resource type.
Etag string: Gets a unique read-only string that changes whenever the resource is updated.

endpointLinks List<CdnEndpointResponse>: Describes Azure CDN endpoints associated with this Web Application Firewall policy.
id String: The provider-assigned unique ID for this managed resource.
name String: Resource name.
provisioningState String: Provisioning state of the WebApplicationFirewallPolicy.
resourceState String
systemData SystemDataResponse: Read only system data
type String: Resource type.
etag String: Gets a unique read-only string that changes whenever the resource is updated.

endpointLinks CdnEndpointResponse[]: Describes Azure CDN endpoints associated with this Web Application Firewall policy.
id string: The provider-assigned unique ID for this managed resource.
name string: Resource name.
provisioningState string: Provisioning state of the WebApplicationFirewallPolicy.
resourceState string
systemData SystemDataResponse: Read only system data
type string: Resource type.
etag string: Gets a unique read-only string that changes whenever the resource is updated.

endpoint_links Sequence[CdnEndpointResponse]: Describes Azure CDN endpoints associated with this Web Application Firewall policy.
id str: The provider-assigned unique ID for this managed resource.
name str: Resource name.
provisioning_state str: Provisioning state of the WebApplicationFirewallPolicy.
resource_state str
system_data SystemDataResponse: Read only system data
type str: Resource type.
etag str: Gets a unique read-only string that changes whenever the resource is updated.

endpointLinks List<Property Map>: Describes Azure CDN endpoints associated with this Web Application Firewall policy.
id String: The provider-assigned unique ID for this managed resource.
name String: Resource name.
provisioningState String: Provisioning state of the WebApplicationFirewallPolicy.
resourceState String
systemData Property Map: Read only system data
type String: Resource type.
etag String: Gets a unique read-only string that changes whenever the resource is updated.

Supporting Types

ActionType, ActionTypeArgs

Allow: Allow
Block: Block
Log: Log
Redirect: Redirect

ActionTypeAllow: Allow
ActionTypeBlock: Block
ActionTypeLog: Log
ActionTypeRedirect: Redirect

Allow: Allow
Block: Block
Log: Log
Redirect: Redirect

Allow: Allow
Block: Block
Log: Log
Redirect: Redirect

ALLOW: Allow
BLOCK: Block
LOG: Log
REDIRECT: Redirect

"Allow": Allow
"Block": Block
"Log": Log
"Redirect": Redirect

CdnEndpointResponse, CdnEndpointResponseArgs

Id string: ARM Resource ID string.

Id string: ARM Resource ID string.

id String: ARM Resource ID string.

id string: ARM Resource ID string.

id str: ARM Resource ID string.

id String: ARM Resource ID string.

CustomRule, CustomRuleArgs

Action string | Pulumi.AzureNative.Cdn.ActionType: Describes what action to be applied when rule matches
MatchConditions List<Pulumi.AzureNative.Cdn.Inputs.MatchCondition>: List of match conditions.
Name string: Defines the name of the custom rule
Priority int: Defines in what order this rule be evaluated in the overall list of custom rules
EnabledState string | Pulumi.AzureNative.Cdn.CustomRuleEnabledState: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

Action string | ActionType: Describes what action to be applied when rule matches
MatchConditions []MatchCondition: List of match conditions.
Name string: Defines the name of the custom rule
Priority int: Defines in what order this rule be evaluated in the overall list of custom rules
EnabledState string | CustomRuleEnabledState: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action String | ActionType: Describes what action to be applied when rule matches
matchConditions List<MatchCondition>: List of match conditions.
name String: Defines the name of the custom rule
priority Integer: Defines in what order this rule be evaluated in the overall list of custom rules
enabledState String | CustomRuleEnabledState: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action string | ActionType: Describes what action to be applied when rule matches
matchConditions MatchCondition[]: List of match conditions.
name string: Defines the name of the custom rule
priority number: Defines in what order this rule be evaluated in the overall list of custom rules
enabledState string | CustomRuleEnabledState: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action str | ActionType: Describes what action to be applied when rule matches
match_conditions Sequence[MatchCondition]: List of match conditions.
name str: Defines the name of the custom rule
priority int: Defines in what order this rule be evaluated in the overall list of custom rules
enabled_state str | CustomRuleEnabledState: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action String | "Allow" | "Block" | "Log" | "Redirect": Describes what action to be applied when rule matches
matchConditions List<Property Map>: List of match conditions.
name String: Defines the name of the custom rule
priority Number: Defines in what order this rule be evaluated in the overall list of custom rules
enabledState String | "Disabled" | "Enabled": Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

CustomRuleEnabledState, CustomRuleEnabledStateArgs

Disabled: Disabled
Enabled: Enabled

CustomRuleEnabledStateDisabled: Disabled
CustomRuleEnabledStateEnabled: Enabled

Disabled: Disabled
Enabled: Enabled

Disabled: Disabled
Enabled: Enabled

DISABLED: Disabled
ENABLED: Enabled

"Disabled": Disabled
"Enabled": Enabled

CustomRuleList, CustomRuleListArgs

Rules List<Pulumi.AzureNative.Cdn.Inputs.CustomRule>: List of rules

Rules []CustomRule: List of rules

rules List<CustomRule>: List of rules

rules CustomRule[]: List of rules

rules Sequence[CustomRule]: List of rules

rules List<Property Map>: List of rules

CustomRuleListResponse, CustomRuleListResponseArgs

Rules List<Pulumi.AzureNative.Cdn.Inputs.CustomRuleResponse>: List of rules

Rules []CustomRuleResponse: List of rules

rules List<CustomRuleResponse>: List of rules

rules CustomRuleResponse[]: List of rules

rules Sequence[CustomRuleResponse]: List of rules

rules List<Property Map>: List of rules

CustomRuleResponse, CustomRuleResponseArgs

Action string: Describes what action to be applied when rule matches
MatchConditions List<Pulumi.AzureNative.Cdn.Inputs.MatchConditionResponse>: List of match conditions.
Name string: Defines the name of the custom rule
Priority int: Defines in what order this rule be evaluated in the overall list of custom rules
EnabledState string: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

Action string: Describes what action to be applied when rule matches
MatchConditions []MatchConditionResponse: List of match conditions.
Name string: Defines the name of the custom rule
Priority int: Defines in what order this rule be evaluated in the overall list of custom rules
EnabledState string: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action String: Describes what action to be applied when rule matches
matchConditions List<MatchConditionResponse>: List of match conditions.
name String: Defines the name of the custom rule
priority Integer: Defines in what order this rule be evaluated in the overall list of custom rules
enabledState String: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action string: Describes what action to be applied when rule matches
matchConditions MatchConditionResponse[]: List of match conditions.
name string: Defines the name of the custom rule
priority number: Defines in what order this rule be evaluated in the overall list of custom rules
enabledState string: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action str: Describes what action to be applied when rule matches
match_conditions Sequence[MatchConditionResponse]: List of match conditions.
name str: Defines the name of the custom rule
priority int: Defines in what order this rule be evaluated in the overall list of custom rules
enabled_state str: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action String: Describes what action to be applied when rule matches
matchConditions List<Property Map>: List of match conditions.
name String: Defines the name of the custom rule
priority Number: Defines in what order this rule be evaluated in the overall list of custom rules
enabledState String: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

ManagedRuleEnabledState, ManagedRuleEnabledStateArgs

Disabled: Disabled
Enabled: Enabled

ManagedRuleEnabledStateDisabled: Disabled
ManagedRuleEnabledStateEnabled: Enabled

Disabled: Disabled
Enabled: Enabled

Disabled: Disabled
Enabled: Enabled

DISABLED: Disabled
ENABLED: Enabled

"Disabled": Disabled
"Enabled": Enabled

ManagedRuleGroupOverride, ManagedRuleGroupOverrideArgs

RuleGroupName string: Describes the managed rule group within the rule set to override
Rules List<Pulumi.AzureNative.Cdn.Inputs.ManagedRuleOverride>: List of rules that will be enabled. If none specified, all rules in the group will be disabled.

RuleGroupName string: Describes the managed rule group within the rule set to override
Rules []ManagedRuleOverride: List of rules that will be enabled. If none specified, all rules in the group will be disabled.

ruleGroupName String: Describes the managed rule group within the rule set to override
rules List<ManagedRuleOverride>: List of rules that will be enabled. If none specified, all rules in the group will be disabled.

ruleGroupName string: Describes the managed rule group within the rule set to override
rules ManagedRuleOverride[]: List of rules that will be enabled. If none specified, all rules in the group will be disabled.

rule_group_name str: Describes the managed rule group within the rule set to override
rules Sequence[ManagedRuleOverride]: List of rules that will be enabled. If none specified, all rules in the group will be disabled.

ruleGroupName String: Describes the managed rule group within the rule set to override
rules List<Property Map>: List of rules that will be enabled. If none specified, all rules in the group will be disabled.

ManagedRuleGroupOverrideResponse, ManagedRuleGroupOverrideResponseArgs

RuleGroupName string: Describes the managed rule group within the rule set to override
Rules List<Pulumi.AzureNative.Cdn.Inputs.ManagedRuleOverrideResponse>: List of rules that will be enabled. If none specified, all rules in the group will be disabled.

RuleGroupName string: Describes the managed rule group within the rule set to override
Rules []ManagedRuleOverrideResponse: List of rules that will be enabled. If none specified, all rules in the group will be disabled.

ruleGroupName String: Describes the managed rule group within the rule set to override
rules List<ManagedRuleOverrideResponse>: List of rules that will be enabled. If none specified, all rules in the group will be disabled.

ruleGroupName string: Describes the managed rule group within the rule set to override
rules ManagedRuleOverrideResponse[]: List of rules that will be enabled. If none specified, all rules in the group will be disabled.

rule_group_name str: Describes the managed rule group within the rule set to override
rules Sequence[ManagedRuleOverrideResponse]: List of rules that will be enabled. If none specified, all rules in the group will be disabled.

ruleGroupName String: Describes the managed rule group within the rule set to override
rules List<Property Map>: List of rules that will be enabled. If none specified, all rules in the group will be disabled.

ManagedRuleOverride, ManagedRuleOverrideArgs

RuleId string: Identifier for the managed rule.
Action string | Pulumi.AzureNative.Cdn.ActionType: Describes the override action to be applied when rule matches.
EnabledState string | Pulumi.AzureNative.Cdn.ManagedRuleEnabledState: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

RuleId string: Identifier for the managed rule.
Action string | ActionType: Describes the override action to be applied when rule matches.
EnabledState string | ManagedRuleEnabledState: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

ruleId String: Identifier for the managed rule.
action String | ActionType: Describes the override action to be applied when rule matches.
enabledState String | ManagedRuleEnabledState: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

ruleId string: Identifier for the managed rule.
action string | ActionType: Describes the override action to be applied when rule matches.
enabledState string | ManagedRuleEnabledState: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

rule_id str: Identifier for the managed rule.
action str | ActionType: Describes the override action to be applied when rule matches.
enabled_state str | ManagedRuleEnabledState: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

ruleId String: Identifier for the managed rule.
action String | "Allow" | "Block" | "Log" | "Redirect": Describes the override action to be applied when rule matches.
enabledState String | "Disabled" | "Enabled": Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

ManagedRuleOverrideResponse, ManagedRuleOverrideResponseArgs

RuleId string: Identifier for the managed rule.
Action string: Describes the override action to be applied when rule matches.
EnabledState string: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

RuleId string: Identifier for the managed rule.
Action string: Describes the override action to be applied when rule matches.
EnabledState string: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

ruleId String: Identifier for the managed rule.
action String: Describes the override action to be applied when rule matches.
enabledState String: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

ruleId string: Identifier for the managed rule.
action string: Describes the override action to be applied when rule matches.
enabledState string: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

rule_id str: Identifier for the managed rule.
action str: Describes the override action to be applied when rule matches.
enabled_state str: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

ruleId String: Identifier for the managed rule.
action String: Describes the override action to be applied when rule matches.
enabledState String: Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified.

ManagedRuleSet, ManagedRuleSetArgs

RuleSetType string: Defines the rule set type to use.
RuleSetVersion string: Defines the version of the rule set to use.
AnomalyScore int: Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
RuleGroupOverrides List<Pulumi.AzureNative.Cdn.Inputs.ManagedRuleGroupOverride>: Defines the rule overrides to apply to the rule set.

RuleSetType string: Defines the rule set type to use.
RuleSetVersion string: Defines the version of the rule set to use.
AnomalyScore int: Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
RuleGroupOverrides []ManagedRuleGroupOverride: Defines the rule overrides to apply to the rule set.

ruleSetType String: Defines the rule set type to use.
ruleSetVersion String: Defines the version of the rule set to use.
anomalyScore Integer: Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
ruleGroupOverrides List<ManagedRuleGroupOverride>: Defines the rule overrides to apply to the rule set.

ruleSetType string: Defines the rule set type to use.
ruleSetVersion string: Defines the version of the rule set to use.
anomalyScore number: Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
ruleGroupOverrides ManagedRuleGroupOverride[]: Defines the rule overrides to apply to the rule set.

rule_set_type str: Defines the rule set type to use.
rule_set_version str: Defines the version of the rule set to use.
anomaly_score int: Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
rule_group_overrides Sequence[ManagedRuleGroupOverride]: Defines the rule overrides to apply to the rule set.

ruleSetType String: Defines the rule set type to use.
ruleSetVersion String: Defines the version of the rule set to use.
anomalyScore Number: Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
ruleGroupOverrides List<Property Map>: Defines the rule overrides to apply to the rule set.

ManagedRuleSetList, ManagedRuleSetListArgs

ManagedRuleSets List<Pulumi.AzureNative.Cdn.Inputs.ManagedRuleSet>: List of rule sets.

ManagedRuleSets []ManagedRuleSet: List of rule sets.

managedRuleSets List<ManagedRuleSet>: List of rule sets.

managedRuleSets ManagedRuleSet[]: List of rule sets.

managed_rule_sets Sequence[ManagedRuleSet]: List of rule sets.

managedRuleSets List<Property Map>: List of rule sets.

ManagedRuleSetListResponse, ManagedRuleSetListResponseArgs

ManagedRuleSets List<Pulumi.AzureNative.Cdn.Inputs.ManagedRuleSetResponse>: List of rule sets.

ManagedRuleSets []ManagedRuleSetResponse: List of rule sets.

managedRuleSets List<ManagedRuleSetResponse>: List of rule sets.

managedRuleSets ManagedRuleSetResponse[]: List of rule sets.

managed_rule_sets Sequence[ManagedRuleSetResponse]: List of rule sets.

managedRuleSets List<Property Map>: List of rule sets.

ManagedRuleSetResponse, ManagedRuleSetResponseArgs

RuleSetType string: Defines the rule set type to use.
RuleSetVersion string: Defines the version of the rule set to use.
AnomalyScore int: Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
RuleGroupOverrides List<Pulumi.AzureNative.Cdn.Inputs.ManagedRuleGroupOverrideResponse>: Defines the rule overrides to apply to the rule set.

RuleSetType string: Defines the rule set type to use.
RuleSetVersion string: Defines the version of the rule set to use.
AnomalyScore int: Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
RuleGroupOverrides []ManagedRuleGroupOverrideResponse: Defines the rule overrides to apply to the rule set.

ruleSetType String: Defines the rule set type to use.
ruleSetVersion String: Defines the version of the rule set to use.
anomalyScore Integer: Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
ruleGroupOverrides List<ManagedRuleGroupOverrideResponse>: Defines the rule overrides to apply to the rule set.

ruleSetType string: Defines the rule set type to use.
ruleSetVersion string: Defines the version of the rule set to use.
anomalyScore number: Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
ruleGroupOverrides ManagedRuleGroupOverrideResponse[]: Defines the rule overrides to apply to the rule set.

rule_set_type str: Defines the rule set type to use.
rule_set_version str: Defines the version of the rule set to use.
anomaly_score int: Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
rule_group_overrides Sequence[ManagedRuleGroupOverrideResponse]: Defines the rule overrides to apply to the rule set.

ruleSetType String: Defines the rule set type to use.
ruleSetVersion String: Defines the version of the rule set to use.
anomalyScore Number: Verizon only : If the rule set supports anomaly detection mode, this describes the threshold for blocking requests.
ruleGroupOverrides List<Property Map>: Defines the rule overrides to apply to the rule set.

MatchCondition, MatchConditionArgs

MatchValue List<string>: List of possible match values.
MatchVariable string | Pulumi.AzureNative.Cdn.WafMatchVariable: Match variable to compare against.
Operator string | Pulumi.AzureNative.Cdn.Operator: Describes operator to be matched
NegateCondition bool: Describes if the result of this condition should be negated.
Selector string: Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
Transforms List<Union<string, Pulumi.AzureNative.Cdn.TransformType>>: List of transforms.

MatchValue []string: List of possible match values.
MatchVariable string | WafMatchVariable: Match variable to compare against.
Operator string | Operator: Describes operator to be matched
NegateCondition bool: Describes if the result of this condition should be negated.
Selector string: Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
Transforms []string: List of transforms.

matchValue List<String>: List of possible match values.
matchVariable String | WafMatchVariable: Match variable to compare against.
operator String | Operator: Describes operator to be matched
negateCondition Boolean: Describes if the result of this condition should be negated.
selector String: Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
transforms List<Either<String,TransformType>>: List of transforms.

matchValue string[]: List of possible match values.
matchVariable string | WafMatchVariable: Match variable to compare against.
operator string | Operator: Describes operator to be matched
negateCondition boolean: Describes if the result of this condition should be negated.
selector string: Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
transforms (string | TransformType)[]: List of transforms.

match_value Sequence[str]: List of possible match values.
match_variable str | WafMatchVariable: Match variable to compare against.
operator str | Operator: Describes operator to be matched
negate_condition bool: Describes if the result of this condition should be negated.
selector str: Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
transforms Sequence[Union[str, TransformType]]: List of transforms.

matchValue List<String>: List of possible match values.
matchVariable String | "RemoteAddr" | "SocketAddr" | "RequestMethod" | "RequestHeader" | "RequestUri" | "QueryString" | "RequestBody" | "Cookies" | "PostArgs": Match variable to compare against.
operator String | "Any" | "IPMatch" | "GeoMatch" | "Equal" | "Contains" | "LessThan" | "GreaterThan" | "LessThanOrEqual" | "GreaterThanOrEqual" | "BeginsWith" | "EndsWith" | "RegEx": Describes operator to be matched
negateCondition Boolean: Describes if the result of this condition should be negated.
selector String: Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
transforms List<String | "Lowercase" | "Uppercase" | "Trim" | "UrlDecode" | "UrlEncode" | "RemoveNulls">: List of transforms.

MatchConditionResponse, MatchConditionResponseArgs

MatchValue List<string>: List of possible match values.
MatchVariable string: Match variable to compare against.
Operator string: Describes operator to be matched
NegateCondition bool: Describes if the result of this condition should be negated.
Selector string: Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
Transforms List<string>: List of transforms.

MatchValue []string: List of possible match values.
MatchVariable string: Match variable to compare against.
Operator string: Describes operator to be matched
NegateCondition bool: Describes if the result of this condition should be negated.
Selector string: Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
Transforms []string: List of transforms.

matchValue List<String>: List of possible match values.
matchVariable String: Match variable to compare against.
operator String: Describes operator to be matched
negateCondition Boolean: Describes if the result of this condition should be negated.
selector String: Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
transforms List<String>: List of transforms.

matchValue string[]: List of possible match values.
matchVariable string: Match variable to compare against.
operator string: Describes operator to be matched
negateCondition boolean: Describes if the result of this condition should be negated.
selector string: Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
transforms string[]: List of transforms.

match_value Sequence[str]: List of possible match values.
match_variable str: Match variable to compare against.
operator str: Describes operator to be matched
negate_condition bool: Describes if the result of this condition should be negated.
selector str: Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
transforms Sequence[str]: List of transforms.

matchValue List<String>: List of possible match values.
matchVariable String: Match variable to compare against.
operator String: Describes operator to be matched
negateCondition Boolean: Describes if the result of this condition should be negated.
selector String: Selector can used to match a specific key for QueryString, Cookies, RequestHeader or PostArgs.
transforms List<String>: List of transforms.

Operator, OperatorArgs

Any: Any
IPMatch: IPMatch
GeoMatch: GeoMatch
Equal: Equal
Contains: Contains
LessThan: LessThan
GreaterThan: GreaterThan
LessThanOrEqual: LessThanOrEqual
GreaterThanOrEqual: GreaterThanOrEqual
BeginsWith: BeginsWith
EndsWith: EndsWith
RegEx: RegEx

OperatorAny: Any
OperatorIPMatch: IPMatch
OperatorGeoMatch: GeoMatch
OperatorEqual: Equal
OperatorContains: Contains
OperatorLessThan: LessThan
OperatorGreaterThan: GreaterThan
OperatorLessThanOrEqual: LessThanOrEqual
OperatorGreaterThanOrEqual: GreaterThanOrEqual
OperatorBeginsWith: BeginsWith
OperatorEndsWith: EndsWith
OperatorRegEx: RegEx

Any: Any
IPMatch: IPMatch
GeoMatch: GeoMatch
Equal: Equal
Contains: Contains
LessThan: LessThan
GreaterThan: GreaterThan
LessThanOrEqual: LessThanOrEqual
GreaterThanOrEqual: GreaterThanOrEqual
BeginsWith: BeginsWith
EndsWith: EndsWith
RegEx: RegEx

Any: Any
IPMatch: IPMatch
GeoMatch: GeoMatch
Equal: Equal
Contains: Contains
LessThan: LessThan
GreaterThan: GreaterThan
LessThanOrEqual: LessThanOrEqual
GreaterThanOrEqual: GreaterThanOrEqual
BeginsWith: BeginsWith
EndsWith: EndsWith
RegEx: RegEx

ANY: Any
IP_MATCH: IPMatch
GEO_MATCH: GeoMatch
EQUAL: Equal
CONTAINS: Contains
LESS_THAN: LessThan
GREATER_THAN: GreaterThan
LESS_THAN_OR_EQUAL: LessThanOrEqual
GREATER_THAN_OR_EQUAL: GreaterThanOrEqual
BEGINS_WITH: BeginsWith
ENDS_WITH: EndsWith
REG_EX: RegEx

"Any": Any
"IPMatch": IPMatch
"GeoMatch": GeoMatch
"Equal": Equal
"Contains": Contains
"LessThan": LessThan
"GreaterThan": GreaterThan
"LessThanOrEqual": LessThanOrEqual
"GreaterThanOrEqual": GreaterThanOrEqual
"BeginsWith": BeginsWith
"EndsWith": EndsWith
"RegEx": RegEx

PolicyEnabledState, PolicyEnabledStateArgs

Disabled: Disabled
Enabled: Enabled

PolicyEnabledStateDisabled: Disabled
PolicyEnabledStateEnabled: Enabled

Disabled: Disabled
Enabled: Enabled

Disabled: Disabled
Enabled: Enabled

DISABLED: Disabled
ENABLED: Enabled

"Disabled": Disabled
"Enabled": Enabled

PolicyMode, PolicyModeArgs

Prevention: Prevention
Detection: Detection

PolicyModePrevention: Prevention
PolicyModeDetection: Detection

Prevention: Prevention
Detection: Detection

Prevention: Prevention
Detection: Detection

PREVENTION: Prevention
DETECTION: Detection

"Prevention": Prevention
"Detection": Detection

PolicySettings, PolicySettingsArgs

DefaultCustomBlockResponseBody string: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
DefaultCustomBlockResponseStatusCode int: If the action type is block, this field defines the default customer overridable http response status code.
DefaultRedirectUrl string: If action type is redirect, this field represents the default redirect URL for the client.
EnabledState string | Pulumi.AzureNative.Cdn.PolicyEnabledState: describes if the policy is in enabled state or disabled state
Mode string | Pulumi.AzureNative.Cdn.PolicyMode: Describes if it is in detection mode or prevention mode at policy level.

DefaultCustomBlockResponseBody string: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
DefaultCustomBlockResponseStatusCode int: If the action type is block, this field defines the default customer overridable http response status code.
DefaultRedirectUrl string: If action type is redirect, this field represents the default redirect URL for the client.
EnabledState string | PolicyEnabledState: describes if the policy is in enabled state or disabled state
Mode string | PolicyMode: Describes if it is in detection mode or prevention mode at policy level.

defaultCustomBlockResponseBody String: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
defaultCustomBlockResponseStatusCode Integer: If the action type is block, this field defines the default customer overridable http response status code.
defaultRedirectUrl String: If action type is redirect, this field represents the default redirect URL for the client.
enabledState String | PolicyEnabledState: describes if the policy is in enabled state or disabled state
mode String | PolicyMode: Describes if it is in detection mode or prevention mode at policy level.

defaultCustomBlockResponseBody string: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
defaultCustomBlockResponseStatusCode number: If the action type is block, this field defines the default customer overridable http response status code.
defaultRedirectUrl string: If action type is redirect, this field represents the default redirect URL for the client.
enabledState string | PolicyEnabledState: describes if the policy is in enabled state or disabled state
mode string | PolicyMode: Describes if it is in detection mode or prevention mode at policy level.

default_custom_block_response_body str: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
default_custom_block_response_status_code int: If the action type is block, this field defines the default customer overridable http response status code.
default_redirect_url str: If action type is redirect, this field represents the default redirect URL for the client.
enabled_state str | PolicyEnabledState: describes if the policy is in enabled state or disabled state
mode str | PolicyMode: Describes if it is in detection mode or prevention mode at policy level.

defaultCustomBlockResponseBody String: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
defaultCustomBlockResponseStatusCode Number: If the action type is block, this field defines the default customer overridable http response status code.
defaultRedirectUrl String: If action type is redirect, this field represents the default redirect URL for the client.
enabledState String | "Disabled" | "Enabled": describes if the policy is in enabled state or disabled state
mode String | "Prevention" | "Detection": Describes if it is in detection mode or prevention mode at policy level.

PolicySettingsResponse, PolicySettingsResponseArgs

DefaultCustomBlockResponseBody string: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
DefaultCustomBlockResponseStatusCode int: If the action type is block, this field defines the default customer overridable http response status code.
DefaultRedirectUrl string: If action type is redirect, this field represents the default redirect URL for the client.
EnabledState string: describes if the policy is in enabled state or disabled state
Mode string: Describes if it is in detection mode or prevention mode at policy level.

DefaultCustomBlockResponseBody string: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
DefaultCustomBlockResponseStatusCode int: If the action type is block, this field defines the default customer overridable http response status code.
DefaultRedirectUrl string: If action type is redirect, this field represents the default redirect URL for the client.
EnabledState string: describes if the policy is in enabled state or disabled state
Mode string: Describes if it is in detection mode or prevention mode at policy level.

defaultCustomBlockResponseBody String: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
defaultCustomBlockResponseStatusCode Integer: If the action type is block, this field defines the default customer overridable http response status code.
defaultRedirectUrl String: If action type is redirect, this field represents the default redirect URL for the client.
enabledState String: describes if the policy is in enabled state or disabled state
mode String: Describes if it is in detection mode or prevention mode at policy level.

defaultCustomBlockResponseBody string: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
defaultCustomBlockResponseStatusCode number: If the action type is block, this field defines the default customer overridable http response status code.
defaultRedirectUrl string: If action type is redirect, this field represents the default redirect URL for the client.
enabledState string: describes if the policy is in enabled state or disabled state
mode string: Describes if it is in detection mode or prevention mode at policy level.

default_custom_block_response_body str: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
default_custom_block_response_status_code int: If the action type is block, this field defines the default customer overridable http response status code.
default_redirect_url str: If action type is redirect, this field represents the default redirect URL for the client.
enabled_state str: describes if the policy is in enabled state or disabled state
mode str: Describes if it is in detection mode or prevention mode at policy level.

defaultCustomBlockResponseBody String: If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
defaultCustomBlockResponseStatusCode Number: If the action type is block, this field defines the default customer overridable http response status code.
defaultRedirectUrl String: If action type is redirect, this field represents the default redirect URL for the client.
enabledState String: describes if the policy is in enabled state or disabled state
mode String: Describes if it is in detection mode or prevention mode at policy level.

RateLimitRule, RateLimitRuleArgs

Action string | Pulumi.AzureNative.Cdn.ActionType: Describes what action to be applied when rule matches
MatchConditions List<Pulumi.AzureNative.Cdn.Inputs.MatchCondition>: List of match conditions.
Name string: Defines the name of the custom rule
Priority int: Defines in what order this rule be evaluated in the overall list of custom rules
RateLimitDurationInMinutes int: Defines rate limit duration. Default is 1 minute.
RateLimitThreshold int: Defines rate limit threshold.
EnabledState string | Pulumi.AzureNative.Cdn.CustomRuleEnabledState: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

Action string | ActionType: Describes what action to be applied when rule matches
MatchConditions []MatchCondition: List of match conditions.
Name string: Defines the name of the custom rule
Priority int: Defines in what order this rule be evaluated in the overall list of custom rules
RateLimitDurationInMinutes int: Defines rate limit duration. Default is 1 minute.
RateLimitThreshold int: Defines rate limit threshold.
EnabledState string | CustomRuleEnabledState: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action String | ActionType: Describes what action to be applied when rule matches
matchConditions List<MatchCondition>: List of match conditions.
name String: Defines the name of the custom rule
priority Integer: Defines in what order this rule be evaluated in the overall list of custom rules
rateLimitDurationInMinutes Integer: Defines rate limit duration. Default is 1 minute.
rateLimitThreshold Integer: Defines rate limit threshold.
enabledState String | CustomRuleEnabledState: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action string | ActionType: Describes what action to be applied when rule matches
matchConditions MatchCondition[]: List of match conditions.
name string: Defines the name of the custom rule
priority number: Defines in what order this rule be evaluated in the overall list of custom rules
rateLimitDurationInMinutes number: Defines rate limit duration. Default is 1 minute.
rateLimitThreshold number: Defines rate limit threshold.
enabledState string | CustomRuleEnabledState: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action str | ActionType: Describes what action to be applied when rule matches
match_conditions Sequence[MatchCondition]: List of match conditions.
name str: Defines the name of the custom rule
priority int: Defines in what order this rule be evaluated in the overall list of custom rules
rate_limit_duration_in_minutes int: Defines rate limit duration. Default is 1 minute.
rate_limit_threshold int: Defines rate limit threshold.
enabled_state str | CustomRuleEnabledState: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action String | "Allow" | "Block" | "Log" | "Redirect": Describes what action to be applied when rule matches
matchConditions List<Property Map>: List of match conditions.
name String: Defines the name of the custom rule
priority Number: Defines in what order this rule be evaluated in the overall list of custom rules
rateLimitDurationInMinutes Number: Defines rate limit duration. Default is 1 minute.
rateLimitThreshold Number: Defines rate limit threshold.
enabledState String | "Disabled" | "Enabled": Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

RateLimitRuleList, RateLimitRuleListArgs

Rules List<Pulumi.AzureNative.Cdn.Inputs.RateLimitRule>: List of rules

Rules []RateLimitRule: List of rules

rules List<RateLimitRule>: List of rules

rules RateLimitRule[]: List of rules

rules Sequence[RateLimitRule]: List of rules

rules List<Property Map>: List of rules

RateLimitRuleListResponse, RateLimitRuleListResponseArgs

Rules List<Pulumi.AzureNative.Cdn.Inputs.RateLimitRuleResponse>: List of rules

Rules []RateLimitRuleResponse: List of rules

rules List<RateLimitRuleResponse>: List of rules

rules RateLimitRuleResponse[]: List of rules

rules Sequence[RateLimitRuleResponse]: List of rules

rules List<Property Map>: List of rules

RateLimitRuleResponse, RateLimitRuleResponseArgs

Action string: Describes what action to be applied when rule matches
MatchConditions List<Pulumi.AzureNative.Cdn.Inputs.MatchConditionResponse>: List of match conditions.
Name string: Defines the name of the custom rule
Priority int: Defines in what order this rule be evaluated in the overall list of custom rules
RateLimitDurationInMinutes int: Defines rate limit duration. Default is 1 minute.
RateLimitThreshold int: Defines rate limit threshold.
EnabledState string: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

Action string: Describes what action to be applied when rule matches
MatchConditions []MatchConditionResponse: List of match conditions.
Name string: Defines the name of the custom rule
Priority int: Defines in what order this rule be evaluated in the overall list of custom rules
RateLimitDurationInMinutes int: Defines rate limit duration. Default is 1 minute.
RateLimitThreshold int: Defines rate limit threshold.
EnabledState string: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action String: Describes what action to be applied when rule matches
matchConditions List<MatchConditionResponse>: List of match conditions.
name String: Defines the name of the custom rule
priority Integer: Defines in what order this rule be evaluated in the overall list of custom rules
rateLimitDurationInMinutes Integer: Defines rate limit duration. Default is 1 minute.
rateLimitThreshold Integer: Defines rate limit threshold.
enabledState String: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action string: Describes what action to be applied when rule matches
matchConditions MatchConditionResponse[]: List of match conditions.
name string: Defines the name of the custom rule
priority number: Defines in what order this rule be evaluated in the overall list of custom rules
rateLimitDurationInMinutes number: Defines rate limit duration. Default is 1 minute.
rateLimitThreshold number: Defines rate limit threshold.
enabledState string: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action str: Describes what action to be applied when rule matches
match_conditions Sequence[MatchConditionResponse]: List of match conditions.
name str: Defines the name of the custom rule
priority int: Defines in what order this rule be evaluated in the overall list of custom rules
rate_limit_duration_in_minutes int: Defines rate limit duration. Default is 1 minute.
rate_limit_threshold int: Defines rate limit threshold.
enabled_state str: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

action String: Describes what action to be applied when rule matches
matchConditions List<Property Map>: List of match conditions.
name String: Defines the name of the custom rule
priority Number: Defines in what order this rule be evaluated in the overall list of custom rules
rateLimitDurationInMinutes Number: Defines rate limit duration. Default is 1 minute.
rateLimitThreshold Number: Defines rate limit threshold.
enabledState String: Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.

Sku, SkuArgs

Name string | Pulumi.AzureNative.Cdn.SkuName: Name of the pricing tier.

Name string | SkuName: Name of the pricing tier.

name String | SkuName: Name of the pricing tier.

name string | SkuName: Name of the pricing tier.

name str | SkuName: Name of the pricing tier.

name String | "Standard_Verizon" | "Premium_Verizon" | "Custom_Verizon" | "Standard_Akamai" | "Standard_ChinaCdn" | "Standard_Microsoft" | "Standard_AzureFrontDoor" | "Premium_AzureFrontDoor" | "Standard_955BandWidth_ChinaCdn" | "Standard_AvgBandWidth_ChinaCdn" | "StandardPlus_ChinaCdn" | "StandardPlus_955BandWidth_ChinaCdn" | "StandardPlus_AvgBandWidth_ChinaCdn": Name of the pricing tier.

SkuName, SkuNameArgs

Standard_Verizon: Standard_Verizon
Premium_Verizon: Premium_Verizon
Custom_Verizon: Custom_Verizon
Standard_Akamai: Standard_Akamai
Standard_ChinaCdn: Standard_ChinaCdn
Standard_Microsoft: Standard_Microsoft
Standard_AzureFrontDoor: Standard_AzureFrontDoor
Premium_AzureFrontDoor: Premium_AzureFrontDoor
Standard_955BandWidth_ChinaCdn: Standard_955BandWidth_ChinaCdn
Standard_AvgBandWidth_ChinaCdn: Standard_AvgBandWidth_ChinaCdn
StandardPlus_ChinaCdn: StandardPlus_ChinaCdn
StandardPlus_955BandWidth_ChinaCdn: StandardPlus_955BandWidth_ChinaCdn
StandardPlus_AvgBandWidth_ChinaCdn: StandardPlus_AvgBandWidth_ChinaCdn

SkuName_Standard_Verizon: Standard_Verizon
SkuName_Premium_Verizon: Premium_Verizon
SkuName_Custom_Verizon: Custom_Verizon
SkuName_Standard_Akamai: Standard_Akamai
SkuName_Standard_ChinaCdn: Standard_ChinaCdn
SkuName_Standard_Microsoft: Standard_Microsoft
SkuName_Standard_AzureFrontDoor: Standard_AzureFrontDoor
SkuName_Premium_AzureFrontDoor: Premium_AzureFrontDoor
SkuName_Standard_955BandWidth_ChinaCdn: Standard_955BandWidth_ChinaCdn
SkuName_Standard_AvgBandWidth_ChinaCdn: Standard_AvgBandWidth_ChinaCdn
SkuName_StandardPlus_ChinaCdn: StandardPlus_ChinaCdn
SkuName_StandardPlus_955BandWidth_ChinaCdn: StandardPlus_955BandWidth_ChinaCdn
SkuName_StandardPlus_AvgBandWidth_ChinaCdn: StandardPlus_AvgBandWidth_ChinaCdn

Standard_Verizon: Standard_Verizon
Premium_Verizon: Premium_Verizon
Custom_Verizon: Custom_Verizon
Standard_Akamai: Standard_Akamai
Standard_ChinaCdn: Standard_ChinaCdn
Standard_Microsoft: Standard_Microsoft
Standard_AzureFrontDoor: Standard_AzureFrontDoor
Premium_AzureFrontDoor: Premium_AzureFrontDoor
Standard_955BandWidth_ChinaCdn: Standard_955BandWidth_ChinaCdn
Standard_AvgBandWidth_ChinaCdn: Standard_AvgBandWidth_ChinaCdn
StandardPlus_ChinaCdn: StandardPlus_ChinaCdn
StandardPlus_955BandWidth_ChinaCdn: StandardPlus_955BandWidth_ChinaCdn
StandardPlus_AvgBandWidth_ChinaCdn: StandardPlus_AvgBandWidth_ChinaCdn

Standard_Verizon: Standard_Verizon
Premium_Verizon: Premium_Verizon
Custom_Verizon: Custom_Verizon
Standard_Akamai: Standard_Akamai
Standard_ChinaCdn: Standard_ChinaCdn
Standard_Microsoft: Standard_Microsoft
Standard_AzureFrontDoor: Standard_AzureFrontDoor
Premium_AzureFrontDoor: Premium_AzureFrontDoor
Standard_955BandWidth_ChinaCdn: Standard_955BandWidth_ChinaCdn
Standard_AvgBandWidth_ChinaCdn: Standard_AvgBandWidth_ChinaCdn
StandardPlus_ChinaCdn: StandardPlus_ChinaCdn
StandardPlus_955BandWidth_ChinaCdn: StandardPlus_955BandWidth_ChinaCdn
StandardPlus_AvgBandWidth_ChinaCdn: StandardPlus_AvgBandWidth_ChinaCdn

STANDARD_VERIZON: Standard_Verizon
PREMIUM_VERIZON: Premium_Verizon
CUSTOM_VERIZON: Custom_Verizon
STANDARD_AKAMAI: Standard_Akamai
STANDARD_CHINA_CDN: Standard_ChinaCdn
STANDARD_MICROSOFT: Standard_Microsoft
STANDARD_AZURE_FRONT_DOOR: Standard_AzureFrontDoor
PREMIUM_AZURE_FRONT_DOOR: Premium_AzureFrontDoor
STANDARD_955_BAND_WIDTH_CHINA_CDN: Standard_955BandWidth_ChinaCdn
STANDARD_AVG_BAND_WIDTH_CHINA_CDN: Standard_AvgBandWidth_ChinaCdn
STANDARD_PLUS_CHINA_CDN: StandardPlus_ChinaCdn
STANDARD_PLUS_955_BAND_WIDTH_CHINA_CDN: StandardPlus_955BandWidth_ChinaCdn
STANDARD_PLUS_AVG_BAND_WIDTH_CHINA_CDN: StandardPlus_AvgBandWidth_ChinaCdn

"Standard_Verizon": Standard_Verizon
"Premium_Verizon": Premium_Verizon
"Custom_Verizon": Custom_Verizon
"Standard_Akamai": Standard_Akamai
"Standard_ChinaCdn": Standard_ChinaCdn
"Standard_Microsoft": Standard_Microsoft
"Standard_AzureFrontDoor": Standard_AzureFrontDoor
"Premium_AzureFrontDoor": Premium_AzureFrontDoor
"Standard_955BandWidth_ChinaCdn": Standard_955BandWidth_ChinaCdn
"Standard_AvgBandWidth_ChinaCdn": Standard_AvgBandWidth_ChinaCdn
"StandardPlus_ChinaCdn": StandardPlus_ChinaCdn
"StandardPlus_955BandWidth_ChinaCdn": StandardPlus_955BandWidth_ChinaCdn
"StandardPlus_AvgBandWidth_ChinaCdn": StandardPlus_AvgBandWidth_ChinaCdn

SkuResponse, SkuResponseArgs

Name string: Name of the pricing tier.

Name string: Name of the pricing tier.

name String: Name of the pricing tier.

name string: Name of the pricing tier.

name str: Name of the pricing tier.

name String: Name of the pricing tier.

SystemDataResponse, SystemDataResponseArgs

CreatedAt string: The timestamp of resource creation (UTC)
CreatedBy string: An identifier for the identity that created the resource
CreatedByType string: The type of identity that created the resource
LastModifiedAt string: The timestamp of resource last modification (UTC)
LastModifiedBy string: An identifier for the identity that last modified the resource
LastModifiedByType string: The type of identity that last modified the resource

CreatedAt string: The timestamp of resource creation (UTC)
CreatedBy string: An identifier for the identity that created the resource
CreatedByType string: The type of identity that created the resource
LastModifiedAt string: The timestamp of resource last modification (UTC)
LastModifiedBy string: An identifier for the identity that last modified the resource
LastModifiedByType string: The type of identity that last modified the resource

createdAt String: The timestamp of resource creation (UTC)
createdBy String: An identifier for the identity that created the resource
createdByType String: The type of identity that created the resource
lastModifiedAt String: The timestamp of resource last modification (UTC)
lastModifiedBy String: An identifier for the identity that last modified the resource
lastModifiedByType String: The type of identity that last modified the resource

createdAt string: The timestamp of resource creation (UTC)
createdBy string: An identifier for the identity that created the resource
createdByType string: The type of identity that created the resource
lastModifiedAt string: The timestamp of resource last modification (UTC)
lastModifiedBy string: An identifier for the identity that last modified the resource
lastModifiedByType string: The type of identity that last modified the resource

created_at str: The timestamp of resource creation (UTC)
created_by str: An identifier for the identity that created the resource
created_by_type str: The type of identity that created the resource
last_modified_at str: The timestamp of resource last modification (UTC)
last_modified_by str: An identifier for the identity that last modified the resource
last_modified_by_type str: The type of identity that last modified the resource

createdAt String: The timestamp of resource creation (UTC)
createdBy String: An identifier for the identity that created the resource
createdByType String: The type of identity that created the resource
lastModifiedAt String: The timestamp of resource last modification (UTC)
lastModifiedBy String: An identifier for the identity that last modified the resource
lastModifiedByType String: The type of identity that last modified the resource

TransformType, TransformTypeArgs

Lowercase: Lowercase
Uppercase: Uppercase
Trim: Trim
UrlDecode: UrlDecode
UrlEncode: UrlEncode
RemoveNulls: RemoveNulls

TransformTypeLowercase: Lowercase
TransformTypeUppercase: Uppercase
TransformTypeTrim: Trim
TransformTypeUrlDecode: UrlDecode
TransformTypeUrlEncode: UrlEncode
TransformTypeRemoveNulls: RemoveNulls

Lowercase: Lowercase
Uppercase: Uppercase
Trim: Trim
UrlDecode: UrlDecode
UrlEncode: UrlEncode
RemoveNulls: RemoveNulls

Lowercase: Lowercase
Uppercase: Uppercase
Trim: Trim
UrlDecode: UrlDecode
UrlEncode: UrlEncode
RemoveNulls: RemoveNulls

LOWERCASE: Lowercase
UPPERCASE: Uppercase
TRIM: Trim
URL_DECODE: UrlDecode
URL_ENCODE: UrlEncode
REMOVE_NULLS: RemoveNulls

"Lowercase": Lowercase
"Uppercase": Uppercase
"Trim": Trim
"UrlDecode": UrlDecode
"UrlEncode": UrlEncode
"RemoveNulls": RemoveNulls

WafMatchVariable, WafMatchVariableArgs

RemoteAddr: RemoteAddr
SocketAddr: SocketAddr
RequestMethod: RequestMethod
RequestHeader: RequestHeader
RequestUri: RequestUri
QueryString: QueryString
RequestBody: RequestBody
Cookies: Cookies
PostArgs: PostArgs

WafMatchVariableRemoteAddr: RemoteAddr
WafMatchVariableSocketAddr: SocketAddr
WafMatchVariableRequestMethod: RequestMethod
WafMatchVariableRequestHeader: RequestHeader
WafMatchVariableRequestUri: RequestUri
WafMatchVariableQueryString: QueryString
WafMatchVariableRequestBody: RequestBody
WafMatchVariableCookies: Cookies
WafMatchVariablePostArgs: PostArgs

RemoteAddr: RemoteAddr
SocketAddr: SocketAddr
RequestMethod: RequestMethod
RequestHeader: RequestHeader
RequestUri: RequestUri
QueryString: QueryString
RequestBody: RequestBody
Cookies: Cookies
PostArgs: PostArgs

RemoteAddr: RemoteAddr
SocketAddr: SocketAddr
RequestMethod: RequestMethod
RequestHeader: RequestHeader
RequestUri: RequestUri
QueryString: QueryString
RequestBody: RequestBody
Cookies: Cookies
PostArgs: PostArgs

REMOTE_ADDR: RemoteAddr
SOCKET_ADDR: SocketAddr
REQUEST_METHOD: RequestMethod
REQUEST_HEADER: RequestHeader
REQUEST_URI: RequestUri
QUERY_STRING: QueryString
REQUEST_BODY: RequestBody
COOKIES: Cookies
POST_ARGS: PostArgs

"RemoteAddr": RemoteAddr
"SocketAddr": SocketAddr
"RequestMethod": RequestMethod
"RequestHeader": RequestHeader
"RequestUri": RequestUri
"QueryString": QueryString
"RequestBody": RequestBody
"Cookies": Cookies
"PostArgs": PostArgs

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:cdn:Policy MicrosoftCdnWafPolicy /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Cdn/cdnWebApplicationFirewallPolicies/{policyName}

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: Azure Native pulumi/pulumi-azure-native
License: Apache-2.0

This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.

Azure Native v2.63.0 published on Tuesday, Sep 24, 2024 by Pulumi

pulumi/pulumi-azure-native

azure-native.cdn.Policy

On this page

On this page

Example Usage

Creates specific policy

Create Policy Resource

Constructor syntax

Parameters

Constructor example

Policy Resource Properties

Inputs

Outputs

Supporting Types

ActionType, ActionTypeArgs

CdnEndpointResponse, CdnEndpointResponseArgs

CustomRule, CustomRuleArgs

CustomRuleEnabledState, CustomRuleEnabledStateArgs

CustomRuleList, CustomRuleListArgs

CustomRuleListResponse, CustomRuleListResponseArgs

CustomRuleResponse, CustomRuleResponseArgs

ManagedRuleEnabledState, ManagedRuleEnabledStateArgs

ManagedRuleGroupOverride, ManagedRuleGroupOverrideArgs

ManagedRuleGroupOverrideResponse, ManagedRuleGroupOverrideResponseArgs

ManagedRuleOverride, ManagedRuleOverrideArgs

ManagedRuleOverrideResponse, ManagedRuleOverrideResponseArgs

ManagedRuleSet, ManagedRuleSetArgs

ManagedRuleSetList, ManagedRuleSetListArgs

ManagedRuleSetListResponse, ManagedRuleSetListResponseArgs

ManagedRuleSetResponse, ManagedRuleSetResponseArgs

MatchCondition, MatchConditionArgs

MatchConditionResponse, MatchConditionResponseArgs

Operator, OperatorArgs

PolicyEnabledState, PolicyEnabledStateArgs

PolicyMode, PolicyModeArgs

PolicySettings, PolicySettingsArgs

PolicySettingsResponse, PolicySettingsResponseArgs

RateLimitRule, RateLimitRuleArgs

RateLimitRuleList, RateLimitRuleListArgs

RateLimitRuleListResponse, RateLimitRuleListResponseArgs

RateLimitRuleResponse, RateLimitRuleResponseArgs

Sku, SkuArgs

SkuName, SkuNameArgs

SkuResponse, SkuResponseArgs

SystemDataResponse, SystemDataResponseArgs

TransformType, TransformTypeArgs

WafMatchVariable, WafMatchVariableArgs

Import

Package Details

On this page

On this page