az network application-gateway waf-policy managed-rule rule-set

Manage managed rule set of managed rules of a WAF policy.

Commands

az network application-gateway waf-policy managed-rule rule-set add

Add managed rule set to the WAF policy managed rules. For rule set and rules, please visit: https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-crs-rulegroups-rules.

az network application-gateway waf-policy managed-rule rule-set list

List all managed rule set.

az network application-gateway waf-policy managed-rule rule-set remove

Remove a managed rule set by rule set group name if rule_group_name is specified. Otherwise, remove all rule set.

az network application-gateway waf-policy managed-rule rule-set update

Update(Override) existing rule set of a WAF policy managed rules. For rule set and rules, please visit: https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-crs-rulegroups-rules.

az network application-gateway waf-policy managed-rule rule-set add

Add managed rule set to the WAF policy managed rules. For rule set and rules, please visit: https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-crs-rulegroups-rules.

az network application-gateway waf-policy managed-rule rule-set add --policy-name
                                                                    --resource-group
                                                                    --type {Microsoft_BotManagerRuleSet, OWASP}
                                                                    --version {0.1, 2.2.9, 3.0, 3.1}
                                                                    [--group-name]
                                                                    [--rules]
                                                                    [--subscription]

Required Parameters

--policy-name

The name of the web application firewall policy.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--type

The type of the web application firewall rule set.

accepted values: Microsoft_BotManagerRuleSet, OWASP
--version

The version of the web application firewall rule set type. 0.1 is used for Microsoft_BotManagerRuleSet.

accepted values: 0.1, 2.2.9, 3.0, 3.1

Optional Parameters

--group-name

The name of the web application firewall rule set group.

--rules

List of rules that will be disabled.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

az network application-gateway waf-policy managed-rule rule-set list

List all managed rule set.

az network application-gateway waf-policy managed-rule rule-set list --policy-name
                                                                     --resource-group
                                                                     [--query-examples]
                                                                     [--subscription]

Examples

List all managed rule set. (autogenerated)

az network application-gateway waf-policy managed-rule rule-set list --policy-name MyPolicy --resource-group MyResourceGroup

Required Parameters

--policy-name

The name of the web application firewall policy.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Optional Parameters

--query-examples

Recommend JMESPath string for you. You can copy one of the query and paste it after --query parameter within double quotation marks to see the results. You can add one or more positional keywords so that we can give suggestions based on these key words.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

az network application-gateway waf-policy managed-rule rule-set remove

Remove a managed rule set by rule set group name if rule_group_name is specified. Otherwise, remove all rule set.

az network application-gateway waf-policy managed-rule rule-set remove --policy-name
                                                                       --resource-group
                                                                       --type {Microsoft_BotManagerRuleSet, OWASP}
                                                                       --version {0.1, 2.2.9, 3.0, 3.1}
                                                                       [--group-name]
                                                                       [--subscription]

Examples

Remove a managed rule set by rule set group name if rule_group_name is specified. Otherwise, remove all rule set.

az network application-gateway waf-policy managed-rule rule-set remove --policy-name MyPolicy --resource-group MyResourceGroup --type Permanent --version IPv4

Required Parameters

--policy-name

The name of the web application firewall policy.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--type

The type of the web application firewall rule set.

accepted values: Microsoft_BotManagerRuleSet, OWASP
--version

The version of the web application firewall rule set type. 0.1 is used for Microsoft_BotManagerRuleSet.

accepted values: 0.1, 2.2.9, 3.0, 3.1

Optional Parameters

--group-name

The name of the web application firewall rule set group.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

az network application-gateway waf-policy managed-rule rule-set update

Update(Override) existing rule set of a WAF policy managed rules. For rule set and rules, please visit: https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-crs-rulegroups-rules.

az network application-gateway waf-policy managed-rule rule-set update --group-name
                                                                       --policy-name
                                                                       --resource-group
                                                                       --type {Microsoft_BotManagerRuleSet, OWASP}
                                                                       --version {0.1, 2.2.9, 3.0, 3.1}
                                                                       [--add]
                                                                       [--force-string]
                                                                       [--remove]
                                                                       [--rules]
                                                                       [--set]
                                                                       [--subscription]

Required Parameters

--group-name

The name of the web application firewall rule set group.

--policy-name

The name of the web application firewall policy.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--type

The type of the web application firewall rule set.

accepted values: Microsoft_BotManagerRuleSet, OWASP
--version

The version of the web application firewall rule set type. 0.1 is used for Microsoft_BotManagerRuleSet.

accepted values: 0.1, 2.2.9, 3.0, 3.1

Optional Parameters

--add

Add an object to a list of objects by specifying a path and key value pairs. Example: --add property.listProperty <key=value, string or JSON string>.

--force-string

When using 'set' or 'add', preserve string literals instead of attempting to convert to JSON.

--remove

Remove a property or an element from a list. Example: --remove property.list OR --remove propertyToRemove.

--rules

List of rules that will be disabled.

--set

Update an object by specifying a property path and value to set. Example: --set property1.property2=.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.