az network application-gateway waf-policy custom-rule

Is this page helpful?

Any additional feedback?

Feedback will be sent to Microsoft: By pressing the submit button, your feedback will be used to improve Microsoft products and services. Privacy policy.

Manage application gateway web application firewall (WAF) policy custom rules.

Commands

az network application-gateway waf-policy custom-rule create	Create an application gateway WAF policy custom rule.
az network application-gateway waf-policy custom-rule delete	Delete an application gateway WAF policy custom rule.
az network application-gateway waf-policy custom-rule list	List application gateway WAF policy custom rules.
az network application-gateway waf-policy custom-rule match-condition	Manage application gateway web application firewall (WAF) policies.
az network application-gateway waf-policy custom-rule match-condition add	A match condition to an application gateway WAF policy custom rule.
az network application-gateway waf-policy custom-rule match-condition list	List application gateway WAF policy custom rule match conditions.
az network application-gateway waf-policy custom-rule match-condition remove	Remove a match condition from an application gateway WAF policy custom rule.
az network application-gateway waf-policy custom-rule show	Get the details of an application gateway WAF policy custom rule.
az network application-gateway waf-policy custom-rule update	Update an application gateway WAF policy custom rule.

az network application-gateway waf-policy custom-rule create

Create an application gateway WAF policy custom rule.

az network application-gateway waf-policy custom-rule create --action {Allow, Block, Log}
                                                             --name
                                                             --policy-name
                                                             --priority
                                                             --resource-group
                                                             --rule-type {Invalid, MatchRule}

Examples

Create an application gateway WAF policy custom rule. (autogenerated)

az network application-gateway waf-policy custom-rule create --action Allow --name MyWafPolicyRule --policy-name MyPolicy --priority 500 --resource-group MyResourceGroup --rule-type MatchRule

Required Parameters

--action

Action to take.

accepted values: Allow, Block, Log

--name -n

Name of the WAF policy rule.

--policy-name

The name of the application gateway WAF policy.

--priority

Rule priority. Lower values are evaluated prior to higher values.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--rule-type

Type of rule.

accepted values: Invalid, MatchRule

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az network application-gateway waf-policy custom-rule delete

Delete an application gateway WAF policy custom rule.

az network application-gateway waf-policy custom-rule delete [--ids]
                                                             [--name]
                                                             [--policy-name]
                                                             [--resource-group]

Examples

Delete an application gateway WAF policy custom rule. (autogenerated)

az network application-gateway waf-policy custom-rule delete --name MyWafPolicyRule --policy-name MyPolicy --resource-group MyResourceGroup --subscription MySubscription

Optional Parameters

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name -n

Name of the WAF policy rule.

--policy-name

The name of the application gateway WAF policy.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az network application-gateway waf-policy custom-rule list

List application gateway WAF policy custom rules.

az network application-gateway waf-policy custom-rule list --policy-name
                                                           --resource-group

Examples

List application gateway WAF policy custom rules. (autogenerated)

az network application-gateway waf-policy custom-rule list --policy-name MyPolicy --resource-group MyResourceGroup

Required Parameters

--policy-name

The name of the application gateway WAF policy.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az network application-gateway waf-policy custom-rule show

Get the details of an application gateway WAF policy custom rule.

az network application-gateway waf-policy custom-rule show [--ids]
                                                           [--name]
                                                           [--policy-name]
                                                           [--resource-group]

Examples

Get the details of an application gateway WAF policy custom rule. (autogenerated)

az network application-gateway waf-policy custom-rule show --name MyWAFPolicyRule --policy-name MyPolicy --resource-group MyResourceGroup

Optional Parameters

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name -n

Name of the WAF policy rule.

--policy-name

The name of the application gateway WAF policy.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az network application-gateway waf-policy custom-rule update

Update an application gateway WAF policy custom rule.

az network application-gateway waf-policy custom-rule update [--action {Allow, Block, Log}]
                                                             [--add]
                                                             [--force-string]
                                                             [--ids]
                                                             [--name]
                                                             [--policy-name]
                                                             [--priority]
                                                             [--remove]
                                                             [--resource-group]
                                                             [--rule-type {Invalid, MatchRule}]
                                                             [--set]

Examples

Update an application gateway WAF policy custom rule. (autogenerated)

az network application-gateway waf-policy custom-rule update --name MyWAFPolicyRule --policy-name MyPolicy --resource-group MyResourceGroup --set useRemoteGateways=true

Update an application gateway WAF policy custom rule. (autogenerated)

az network application-gateway waf-policy custom-rule update --action Allow --name MyWAFPolicyRule --policy-name MyPolicy --priority 500 --resource-group MyResourceGroup --rule-type MatchRule

Optional Parameters

--action

Action to take.

accepted values: Allow, Block, Log

--add

Add an object to a list of objects by specifying a path and key value pairs. Example: --add property.listProperty <key=value, string or JSON string>.

--force-string

When using 'set' or 'add', preserve string literals instead of attempting to convert to JSON.

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name -n

Name of the WAF policy rule.

--policy-name

The name of the application gateway WAF policy.

--priority

Rule priority. Lower values are evaluated prior to higher values.

--remove

Remove a property or an element from a list. Example: --remove property.list OR --remove propertyToRemove.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--rule-type

Type of rule.

accepted values: Invalid, MatchRule

--set

Update an object by specifying a property path and value to set. Example: --set property1.property2=.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.