Azure Front Door does not have the Azure Web application firewall (WAF) enabled

Description

WAF is a security feature that provides protection for web applications by inspecting incoming traffic and blocking malicious requests before they reach the application. When WAF is enabled on an Azure Front Door, it analyzes incoming traffic to the front door and blocks requests that are determined to be malicious based on a set of rules. This can help to protect your application from a variety of threats, such as SQL injection attacks, cross-site scripting (XSS) attacks, and other types of attacks.

Code Example

resource "azurerm_frontdoor" "example" {
              ...
+             web_application_firewall_policy_link_id = "this_is_id"
              ...
            }

Remediation

Terraform

• Resource: azurerm_frontdoor
• Arguments: web_application_firewall_policy_link_id

Rule Details

Field	Value
ID	IAC-0628
Severity	LOW
IaC Type	arm
Frameworks	Terraform,
Checkov ID	CKV_AZURE_121

References

• Checkov Rule

---