2026.8.25.4

Overview
Name apimurlrules
Tag 2026.8.25.4
FullName br:bicepacrdevwcom.azurecr.io/bicep/modules/applicationgateway/waf/apimurlrules:2026.8.25.4
Last updated 2026-08-25 10:36:04:+00:00
Created 2026-08-25 10:36:04:+00:00
Digest sha256:761c239134adade5ce3ca2e9607063e1a9c930b8e58323e5a6871895079e5a31

Parameters

Name Type Required Description
wafName string Yes The name of the Application Gateway Web Application Firewall policy.
location string No
resourceGroup().location
 The location of the Application Gateway Web Application Firewall policy.
tags object Yes The tags to be used for the Application Gateway Web Application Firewall policy.
policyMode string
'Detection',
'Prevention'
 No
'Prevention'
 The policy mode to be used for the Application Gateway Web Application Firewall policy. Default is Prevention.
policySettings object No
{
  requestBodyCheck: true
  maxRequestBodySizeInKb: 128
  fileUploadLimitInMb: 100
  state: 'Enabled'
  mode: policyMode
  customBlockResponseStatusCode: 403
  jsChallengeCookieExpirationInMins: 30
  requestBodyInspectLimitInKB: 128
  fileUploadEnforcement: true
  requestBodyEnforcement: true
}
 Default policy settings have been defined. These can be overridden by providing a custom object. Default settings are the following:
requestBodyCheck: true
maxRequestBodySizeInKb: 128
fileUploadLimitInMb: 100
state: 'Enabled'
mode: policyMode
customBlockResponseStatusCode: 403
jsChallengeCookieExpirationInMins: 30
requestBodyInspectLimitInKB: 128
fileUploadEnforcement: true
requestBodyEnforcement: true
managedRuleSets array No
[
  {
  ruleSetType: 'Microsoft_DefaultRuleSet'
  ruleSetVersion: '2.1'
  ruleGroupOverrides:   [
  ]
}

  {
  ruleSetType: 'Microsoft_BotManagerRuleSet'
  ruleSetVersion: '1.1'
  ruleGroupOverrides:   [
  ]
}

]
 Default managed rule sets have been defined. These can be overridden by providing a custom object. Default settings are the following:
{
ruleSetType: 'Microsoft_DefaultRuleSet'
ruleSetVersion: '2.1'
ruleGroupOverrides: []
}
{
ruleSetType: 'Microsoft_BotManagerRuleSet'
ruleSetVersion: '1.1'
ruleGroupOverrides: []
}
exclusions array No
[
]
 The exclusions to be used for the API Management service.
vnetAddressPrefixes array No
[
]
 The VNET address prefixes to be used for the Application Gateway service internal allow list.
allowAllIpList array No
[
]
 The allow all IP list to be used in Application Gateway service.
firewallRulesYaml object Yes The firewall rules YAML file to be used for the API Management service.

Outputs

Name Type Description

Example

@description('The target environment.')
param env string

@description('The deployment version.')
param version string = '1.0.0.0'

@description('The name of the Application Gateway Web Application Firewall policy.')
param wafName string

@description('The tags to be used for the Application Gateway Web Application Firewall policy.')
param tags object

@description('The firewall rules YAML file to be used for the API Management service.')
param firewallRulesYaml object


module apimurlrules 'br:bicepacrdevwcom.azurecr.io/bicep/modules/applicationgateway/waf/apimurlrules:2026.8.25.4' = {
    name: 'apimurlrules${env}${version}'
    params: {
      wafName: wafName
      tags: tags
      firewallRulesYaml: firewallRulesYaml
    }
}