From f0d78e767c9fc8553b0f3b5668fb1354601e90e3 Mon Sep 17 00:00:00 2001 From: asukumar22 <70966383+asukumar22@users.noreply.github.com> Date: Wed, 25 Sep 2024 19:14:02 -0700 Subject: [PATCH 1/2] Added ARG query to A01.31 in afd_checklist.en.json Added ARG query to A01.31 in afd_checklist.en.json --- checklists/afd_checklist.en.json | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/checklists/afd_checklist.en.json b/checklists/afd_checklist.en.json index 7f76ab13c..37e2eea10 100644 --- a/checklists/afd_checklist.en.json +++ b/checklists/afd_checklist.en.json @@ -208,6 +208,7 @@ "guid": "147a13d4-2a2f-4824-a524-f5855b52b946", "id": "A01.31", "severity": "High", + "graph" : "resources| where type == "microsoft.network/frontdoorwebapplicationfirewallpolicies"| where properties['managedRules']['managedRuleSets'][1]['ruleSetType'] =~ "Microsoft_BotManagerRuleSet"| extend compliant = properties['managedRules']['managedRuleSets'][1]['ruleSetType'] =~ "Microsoft_BotManagerRuleSet"| distinct id,name,compliant", "link": "https://learn.microsoft.com/azure/web-application-firewall/afds/waf-front-door-best-practices#enable-bot-management-rules" }, { @@ -514,4 +515,4 @@ "waf": "all", "timestamp": "September 23, 2024" } -} \ No newline at end of file +} From 93a4a56cbd92ac1aec1ff1ad73b4f55589cbfb02 Mon Sep 17 00:00:00 2001 From: asukumar22 <70966383+asukumar22@users.noreply.github.com> Date: Thu, 26 Sep 2024 14:08:41 -0700 Subject: [PATCH 2/2] Updated review comments in afd_checklist.en.json --- checklists/afd_checklist.en.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/checklists/afd_checklist.en.json b/checklists/afd_checklist.en.json index 37e2eea10..d6ba4292c 100644 --- a/checklists/afd_checklist.en.json +++ b/checklists/afd_checklist.en.json @@ -208,7 +208,7 @@ "guid": "147a13d4-2a2f-4824-a524-f5855b52b946", "id": "A01.31", "severity": "High", - "graph" : "resources| where type == "microsoft.network/frontdoorwebapplicationfirewallpolicies"| where properties['managedRules']['managedRuleSets'][1]['ruleSetType'] =~ "Microsoft_BotManagerRuleSet"| extend compliant = properties['managedRules']['managedRuleSets'][1]['ruleSetType'] =~ "Microsoft_BotManagerRuleSet"| distinct id,name,compliant", + "graph" : 'resources| where type =~ 'microsoft.network/frontdoorwebapplicationfirewallpolicies'| where properties['managedRules']['managedRuleSets'][1]['ruleSetType'] =~ 'Microsoft_BotManagerRuleSet'| extend compliant = properties['managedRules']['managedRuleSets'][1]['ruleSetType'] =~ 'Microsoft_BotManagerRuleSet'| distinct id,name,compliant', "link": "https://learn.microsoft.com/azure/web-application-firewall/afds/waf-front-door-best-practices#enable-bot-management-rules" }, {