The profiles/securityPolicies resource type can be deployed with operations that target:
For a list of changed properties in each API version, see change log.
To create a Microsoft.Cdn/profiles/securityPolicies resource, add the following JSON to your template.
{
"type": "Microsoft.Cdn/profiles/securityPolicies",
"apiVersion": "2023-07-01-preview",
"name": "string",
"properties": {
"parameters": {
"type": "string"
// For remaining properties, see SecurityPolicyPropertiesParameters objects
}
}
}
Set the type property to specify the type of object.
For WebApplicationFirewall, use:
"type": "WebApplicationFirewall",
"associations": [
{
"domains": [
{
"id": "string"
}
],
"patternsToMatch": [ "string" ]
}
],
"wafPolicy": {
"id": "string"
}
Name | Description | Value |
---|---|---|
type | The resource type | 'Microsoft.Cdn/profiles/securityPolicies' |
apiVersion | The resource api version | '2023-07-01-preview' |
name | The resource name See how to set names and types for child resources in JSON ARM templates. |
string (required) |
properties | The json object that contains properties required to create a security policy | SecurityPolicyProperties |
Name | Description | Value |
---|---|---|
parameters | object which contains security policy parameters | SecurityPolicyPropertiesParameters |
Name | Description | Value |
---|---|---|
type | Set the object type | WebApplicationFirewall (required) |
Name | Description | Value |
---|---|---|
type | The type of the Security policy to create. | 'WebApplicationFirewall' (required) |
associations | Waf associations | SecurityPolicyWebApplicationFirewallAssociation[] |
wafPolicy | Resource ID. | ResourceReference |
Name | Description | Value |
---|---|---|
domains | List of domains. | ActivatedResourceReference[] |
patternsToMatch | List of paths | string[] |
Name | Description | Value |
---|---|---|
id | Resource ID. | string |
Name | Description | Value |
---|---|---|
id | Resource ID. | string |
The following quickstart templates deploy this resource type.
Template | Description |
---|---|
FrontDoor CDN with WAF, Domains and Logs to EventHub |
This template creates a new Azure FrontDoor cdn profile. Create WAF with custom and managed rules, cdn routes, origin and groups with their association with WAF and routes, configures custom domains, create event hub and diagnostic settings for sending CDN access logs using event hub. |
Front Door Premium with blob origin and Private Link |
This template creates a Front Door Premium and an Azure Storage blob container, and uses a private endpoint for Front Door to send traffic to the storage account. |
Front Door Premium with WAF and Microsoft-managed rule sets |
This template creates a Front Door Premium including a web application firewall with the Microsoft-managed default and bot protection rule sets. |
Front Door Standard/Premium with geo-filtering |
This template creates a Front Door Standard/Premium including a web application firewall with a geo-filtering rule. |
Front Door Standard/Premium with rate limit |
This template creates a Front Door Standard/Premium including a web application firewall with a rate limit rule. |
Front Door Standard/Premium with WAF and custom rule |
This template creates a Front Door Standard/Premium including a web application firewall with a custom rule. |
Function App secured by Azure Frontdoor |
This template allows you to deploy an azure premium function protected and published by Azure Frontdoor premium. The conenction between Azure Frontdoor and Azure Functions is protected by Azure Private Link. |