Azure Front Door does not have the Azure Web application firewall (WAF) enabled misconfiguration det

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_121
Category - Subcategory	Public Exposure - Ingress Controls
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	79734546-c8e7-45f3-a350-f14ad01fdda6

Impact

WAF is a security feature that provides protection for web applications by inspecting incoming traffic and blocking malicious requests before they reach the application. When WAF is enabled on an Azure Front Door, it analyzes incoming traffic to the front door and blocks requests that are determined to be malicious based on a set of rules. This can help to protect your application from a variety of threats, such as SQL injection attacks, cross-site scripting (XSS) attacks, and other types of attacks.

How to Fix

Resource: azurerm_frontdoor

• Arguments: web_application_firewall_policy_link_id [source,go]

---

resource "azurerm_frontdoor" "example" { ...

• web_application_firewall_policy_link_id = "this_is_id" ... }

---