Top-level WAF (#7222)

Azure · Oct 2, 2019 · f8a5884 · f8a5884
1 parent 7fde8a0
commit f8a5884
Show file tree

Hide file tree

Showing 5 changed files with 278 additions and 17 deletions.
diff --git a/...ork/resource-manager/Microsoft.Network/stable/2019-08-01/examples/WafListAllPolicies.json b/...ork/resource-manager/Microsoft.Network/stable/2019-08-01/examples/WafListAllPolicies.json
@@ -20,8 +20,11 @@
               "resourceState": "Enabled",
               "provisioningState": "Succeeded",
               "policySettings": {
-                "enabledState": "Enabled",
-                "mode": "Prevention"
+                "state": "Enabled",
+                "mode": "Prevention",
+                "maxRequestBodySizeInKb": 128,
+                "fileUploadLimitInMb": 750,
+                "requestBodyCheck" : true
               },
               "customRules": [
                 {
@@ -81,7 +84,15 @@
                   ],
                   "action": "Block"
                 }
-              ]
+              ],
+              "managedRules" :{
+                "managedRuleSets": [
+                  {
+                    "ruleSetType" : "OWASP",
+                    "ruleSetVersion" : "3.0"
+                  }
+                ]
+              }
             }
           }
         ]

diff --git a/...etwork/resource-manager/Microsoft.Network/stable/2019-08-01/examples/WafListPolicies.json b/...etwork/resource-manager/Microsoft.Network/stable/2019-08-01/examples/WafListPolicies.json
@@ -21,8 +21,19 @@
               "resourceState": "Enabled",
               "provisioningState": "Succeeded",
               "policySettings": {
-                "enabledState": "Enabled",
-                "mode": "Prevention"
+                "state": "Enabled",
+                "mode": "Detection",
+                "maxRequestBodySizeInKb": 128,
+                "fileUploadLimitInMb": 750,
+                "requestBodyCheck" : true
+              },
+              "managedRules": {
+                "managedRuleSets": [
+                  {
+                    "ruleSetType" : "OWASP",
+                    "ruleSetVersion" : "3.0"
+                  }
+                ]
               },
               "customRules": [
                 {

diff --git a/...esource-manager/Microsoft.Network/stable/2019-08-01/examples/WafPolicyCreateOrUpdate.json b/...esource-manager/Microsoft.Network/stable/2019-08-01/examples/WafPolicyCreateOrUpdate.json
@@ -7,6 +7,14 @@
     "parameters": {
       "location": "WestUs",
       "properties": {
+        "managedRules" : {
+            "managedRuleSets" : [
+              {
+              "ruleSetType" : "OWASP",
+              "ruleSetVersion" : "3.0"
+              }
+            ]
+        },
         "customRules": [
           {
             "name": "Rule1",
@@ -80,8 +88,19 @@
           "resourceState": "Enabled",
           "provisioningState": "Succeeded",
           "policySettings": {
-            "enabledState": "Enabled",
-            "mode": "Prevention"
+            "state": "Enabled",
+            "mode": "Detection",
+            "maxRequestBodySizeInKb": 128,
+            "fileUploadLimitInMb": 750,
+            "requestBodyCheck" : true
+          },
+          "managedRules" : {
+            "managedRuleSets" : [
+              {
+              "ruleSetType" : "OWASP",
+              "ruleSetVersion" : "3.0"
+              }
+            ]
           },
           "customRules": [
             {
@@ -159,8 +178,19 @@
           "resourceState": "Enabled",
           "provisioningState": "Succeeded",
           "policySettings": {
-            "enabledState": "Enabled",
-            "mode": "Prevention"
+            "state": "Enabled",
+            "mode": "Detection",
+            "maxRequestBodySizeInKb": 128,
+            "fileUploadLimitInMb": 750,
+            "requestBodyCheck" : true
+          },
+          "managedRules" : {
+            "managedRuleSets" : [
+              {
+              "ruleSetType" : "OWASP",
+              "ruleSetVersion" : "3.0"
+              }
+            ]
           },
           "customRules": [
             {

diff --git a/...n/network/resource-manager/Microsoft.Network/stable/2019-08-01/examples/WafPolicyGet.json b/...n/network/resource-manager/Microsoft.Network/stable/2019-08-01/examples/WafPolicyGet.json
@@ -20,8 +20,11 @@
           "resourceState": "Enabled",
           "provisioningState": "Succeeded",
           "policySettings": {
-            "enabledState": "Enabled",
-            "mode": "Prevention"
+            "state": "Enabled",
+            "mode": "Prevention",
+            "maxRequestBodySizeInKb": 128,
+            "fileUploadLimitInMb": 750,
+            "requestBodyCheck" : true
           },
           "customRules": [
             {
@@ -81,7 +84,55 @@
               ],
               "action": "Block"
             }
-          ]
+          ],
+          "managedRules": {
+            "managedRuleSets" : [
+              {
+                "ruleSetType" : "OWASP",
+                "ruleSetVersion" : "3.0",
+                "ruleGroupOverrides" : [
+                  {
+                    "ruleGroupName" : "REQUEST-942-APPLICATION-ATTACK-SQLI",
+                    "rules" : [
+                      {
+                        "ruleId" : "942130",
+                        "state" :  "Disabled"
+                      },
+                      {
+                        "ruleId" : "942110",
+                        "state" :  "Disabled"
+                      }
+                    ]
+                  },
+                  {
+                    "ruleGroupName" : "REQUEST-920-PROTOCOL-ENFORCEMENT",
+                    "rules" : [
+                      {
+                        "ruleId" : "920100",
+                        "state" :  "Disabled"
+                      },
+                      {
+                        "ruleId" : "920120",
+                        "state" :  "Disabled"
+                      }
+                    ]
+                  }
+                ]
+              }
+            ],
+            "exclusions": [
+              {
+                "matchVariable" : "RequestHeaderNames",
+                "selectorMatchOperator" : "Equals",
+                "selector" : "testHeader1"
+              },
+              {
+                "matchVariable" : "RequestHeaderNames",
+                "selectorMatchOperator" : "StartsWith",
+                "selector" : "testHeader2"
+              }
+            ]
+          }
         }
       }
     }