Add table azure_web_application_firewall_policy Closes #827

azure-test/tests/azure_web_application_firewall_policy/test-get-expected.json

@@ -0,0 +1,10 @@
+[
+  {
+    "id": "{{ output.resource_id.value }}",
+    "name": "{{ resourceName }}",
+    "region": "{{ output.region.value }}",
+    "resource_group": "{{ resourceName }}",
+    "subscription_id": "{{ output.subscription_id.value }}",
+    "type": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies"
+  }
+]

azure-test/tests/azure_web_application_firewall_policy/test-get-query.sql

@@ -0,0 +1,3 @@
+select name, id, type, region, resource_group, subscription_id
+from azure.azure_web_application_firewall_policy
+where name = '{{ resourceName }}' and resource_group = '{{ resourceName }}';

azure-test/tests/azure_web_application_firewall_policy/test-list-expected.json

@@ -0,0 +1,10 @@
+[
+  {
+    "id": "{{ output.resource_id.value }}",
+    "name": "{{ resourceName }}",
+    "region": "{{ output.region.value }}",
+    "resource_group": "{{ resourceName }}",
+    "subscription_id": "{{ output.subscription_id.value }}",
+    "type": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies"
+  }
+]

azure-test/tests/azure_web_application_firewall_policy/test-list-query.sql

@@ -0,0 +1,3 @@
+select name, id, type, region, resource_group, subscription_id
+from azure.azure_web_application_firewall_policy
+where id = '{{ output.resource_id.value }}';

azure-test/tests/azure_web_application_firewall_policy/test-not-found-expected.json

@@ -0,0 +1 @@
+[]

azure-test/tests/azure_web_application_firewall_policy/test-not-found-query.sql

@@ -0,0 +1,3 @@
+select name, id, type, region
+from azure.azure_web_application_firewall_policy
+where name = 'dummy-test{{ resourceName }}' and resource_group = '{{ resourceName }}';

azure-test/tests/azure_web_application_firewall_policy/test-turbot-expected.json

@@ -0,0 +1,10 @@
+[
+  {
+    "akas": [
+      "{{ output.resource_aka.value }}",
+      "{{ output.resource_aka_lower.value }}"
+    ],
+    "name": "{{ resourceName }}",
+    "title": "{{ resourceName }}"
+  }
+]

azure-test/tests/azure_web_application_firewall_policy/test-turbot-query.sql

@@ -0,0 +1,3 @@
+select name, akas, title
+from azure.azure_web_application_firewall_policy
+where name = '{{ resourceName }}' and resource_group = '{{ resourceName }}';

azure-test/tests/azure_web_application_firewall_policy/variables.json

@@ -0,0 +1 @@
+{}

azure-test/tests/azure_web_application_firewall_policy/variables.tf

@@ -0,0 +1,142 @@
+variable "resource_name" {
+  type        = string
+  default     = "turbot-test-20200125-create-update"
+  description = "Name of the resource used throughout the test."
+}
+
+variable "azure_environment" {
+  type        = string
+  default     = "public"
+  description = "Azure environment used for the test."
+}
+
+variable "azure_subscription" {
+  type        = string
+  default     = "3510ae4d-530b-497d-8f30-53b9616fc6c1"
+  description = "Azure environment used for the test."
+}
+
+terraform {
+  required_providers {
+    azurerm = {
+      source  = "hashicorp/azurerm"
+      version = "=2.75.0"
+    }
+  }
+}
+
+provider "azurerm" {
+  # Cannot be passed as a variable
+  environment     = var.azure_environment
+  subscription_id = var.azure_subscription
+  features {}
+}
+
+resource "azurerm_resource_group" "named_test_resource" {
+  name     = var.resource_name
+  location = "West Europe"
+}
+
+resource "azurerm_web_application_firewall_policy" "named_test_resource" {
+  name                = var.resource_name
+  resource_group_name = azurerm_resource_group.named_test_resource.name
+  location            = azurerm_resource_group.named_test_resource.location
+
+  custom_rules {
+    name      = "Rule1"
+    priority  = 1
+    rule_type = "MatchRule"
+
+    match_conditions {
+      match_variables {
+        variable_name = "RemoteAddr"
+      }
+
+      operator           = "IPMatch"
+      negation_condition = false
+      match_values       = ["192.168.1.0/24", "10.0.0.0/24"]
+    }
+
+    action = "Block"
+  }
+
+  custom_rules {
+    name      = "Rule2"
+    priority  = 2
+    rule_type = "MatchRule"
+
+    match_conditions {
+      match_variables {
+        variable_name = "RemoteAddr"
+      }
+
+      operator           = "IPMatch"
+      negation_condition = false
+      match_values       = ["192.168.1.0/24"]
+    }
+
+    match_conditions {
+      match_variables {
+        variable_name = "RequestHeaders"
+        selector      = "UserAgent"
+      }
+
+      operator           = "Contains"
+      negation_condition = false
+      match_values       = ["Windows"]
+    }
+
+    action = "Block"
+  }
+
+  policy_settings {
+    enabled                     = true
+    mode                        = "Prevention"
+    request_body_check          = true
+    file_upload_limit_in_mb     = 100
+    max_request_body_size_in_kb = 128
+  }
+
+  managed_rules {
+    exclusion {
+      match_variable          = "RequestHeaderNames"
+      selector                = "x-company-secret-header"
+      selector_match_operator = "Equals"
+    }
+    exclusion {
+      match_variable          = "RequestCookieNames"
+      selector                = "too-tasty"
+      selector_match_operator = "EndsWith"
+    }
+
+    managed_rule_set {
+      type    = "OWASP"
+      version = "3.2"
+    }
+  }
+}
+
+output "region" {
+  value = azurerm_resource_group.named_test_resource.location
+}
+
+output "resource_aka" {
+  depends_on = [azurerm_web_application_firewall_policy.named_test_resource]
+  value      = "azure://${azurerm_web_application_firewall_policy.named_test_resource.id}"
+}
+
+output "resource_aka_lower" {
+  value = "azure://${lower(azurerm_web_application_firewall_policy.named_test_resource.id)}"
+}
+
+output "resource_name" {
+  value = var.resource_name
+}
+
+output "resource_id" {
+  value = azurerm_web_application_firewall_policy.named_test_resource.id
+}
+
+output "subscription_id" {
+  value = var.azure_subscription
+}

azure/plugin.go

@@ -199,6 +199,7 @@ func Plugin(ctx context.Context) *plugin.Plugin {
 			"azure_tenant":                                                 tableAzureTenant(ctx),
 			"azure_virtual_network":                                        tableAzureVirtualNetwork(ctx),
 			"azure_virtual_network_gateway":                                tableAzureVirtualNetworkGateway(ctx),
+			"azure_web_application_firewall_policy":                        tableAzureWebApplicationFirewallPolicy(ctx),
 		},
 	}