Network - 27015 - HTTP DDoS Protection Ruleset is Enabled in Application Gateway WAF#985
Network - 27015 - HTTP DDoS Protection Ruleset is Enabled in Application Gateway WAF#985praneeth-0000 wants to merge 4 commits intodevfrom
Conversation
There was a problem hiding this comment.
Pull request overview
Adds a new Azure Network Security assessment (TestId 27015) to validate that Application Gateway WAF policies attached to Application Gateways are configured to use the Microsoft HTTP DDoS ruleset and run in Prevention mode, along with end-user remediation guidance.
Changes:
- Introduces
Test-Assessment-27015PowerShell test using Azure Resource Graph to evaluate attached App Gateway WAF policies. - Generates a markdown report/table summarizing policy state, mode, HTTP DDoS ruleset status, and ruleset version.
- Adds accompanying documentation/remediation content for the new assessment.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| src/powershell/tests/Test-Assessment.27015.ps1 | New assessment logic and reporting for validating HTTP DDoS ruleset usage on App Gateway WAF policies. |
| src/powershell/tests/Test-Assessment.27015.md | Documentation and remediation links for the new assessment. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
HTTP DDoS Protection Ruleset is Enabled in Application Gateway WAF