WAF Is Disabled For Azure Application Gateway
- Query id: 2e48d91c-50e4-45c8-9312-27b625868a72
- Query name: WAF Is Disabled For Azure Application Gateway
- Platform: Terraform
- Severity: Medium
- Category: Networking and Firewall
- URL: Github
Description¶
Check if Web Application Firewall is disabled or not configured for Azure's Application Gateway.
Documentation
Code samples¶
Code samples with security vulnerabilities¶
Postitive test num. 1 - tf file
resource "azurerm_application_gateway" "positive1" {
name = "example-appgateway"
resource_group_name = azurerm_resource_group.example.name
location = azurerm_resource_group.example.location
waf_configuration {
enabled = false
}
}
resource "azurerm_application_gateway" "positive2" {
name = "example-appgateway"
resource_group_name = azurerm_resource_group.example.name
location = azurerm_resource_group.example.location
}