ApplicationGateway
Manages an Application Gateway.
Create a ApplicationGateway Resource
new ApplicationGateway(name: string, args: ApplicationGatewayArgs, opts?: CustomResourceOptions);def ApplicationGateway(resource_name, opts=None, authentication_certificates=None, autoscale_configuration=None, backend_address_pools=None, backend_http_settings=None, custom_error_configurations=None, enable_http2=None, firewall_policy_id=None, frontend_ip_configurations=None, frontend_ports=None, gateway_ip_configurations=None, http_listeners=None, identity=None, location=None, name=None, probes=None, redirect_configurations=None, request_routing_rules=None, resource_group_name=None, rewrite_rule_sets=None, sku=None, ssl_certificates=None, ssl_policies=None, tags=None, trusted_root_certificates=None, url_path_maps=None, waf_configuration=None, zones=None, __props__=None);func NewApplicationGateway(ctx *Context, name string, args ApplicationGatewayArgs, opts ...ResourceOption) (*ApplicationGateway, error)public ApplicationGateway(string name, ApplicationGatewayArgs args, CustomResourceOptions? opts = null)- name string
- The unique name of the resource.
- args ApplicationGatewayArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- opts ResourceOptions
- A bag of options that control this resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ApplicationGatewayArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ApplicationGatewayArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
ApplicationGateway Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Programming Model docs.
Inputs
The ApplicationGateway resource accepts the following input properties:
- Backend
Address List<ApplicationPools Gateway Backend Address Pool Args> One or more
backend_address_poolblocks as defined below.- Backend
Http List<ApplicationSettings Gateway Backend Http Setting Args> One or more
backend_http_settingsblocks as defined below.- Frontend
Ip List<ApplicationConfigurations Gateway Frontend Ip Configuration Args> One or more
frontend_ip_configurationblocks as defined below.- Frontend
Ports List<ApplicationGateway Frontend Port Args> One or more
frontend_portblocks as defined below.- Gateway
Ip List<ApplicationConfigurations Gateway Gateway Ip Configuration Args> One or more
gateway_ip_configurationblocks as defined below.- Http
Listeners List<ApplicationGateway Http Listener Args> One or more
http_listenerblocks as defined below.- Request
Routing List<ApplicationRules Gateway Request Routing Rule Args> One or more
request_routing_ruleblocks as defined below.- Resource
Group stringName The name of the resource group in which to the Application Gateway should exist. Changing this forces a new resource to be created.
- Sku
Application
Gateway Sku Args A
skublock as defined below.- Authentication
Certificates List<ApplicationGateway Authentication Certificate Args> One or more
authentication_certificateblocks as defined below.- Autoscale
Configuration ApplicationGateway Autoscale Configuration Args A
autoscale_configurationblock as defined below.- Custom
Error List<ApplicationConfigurations Gateway Custom Error Configuration Args> One or more
custom_error_configurationblocks as defined below.- Enable
Http2 bool Is HTTP2 enabled on the application gateway resource? Defaults to
false.- Firewall
Policy stringId The resource ID of a firewall policy.
- Identity
Application
Gateway Identity Args A
identityblock.- Location string
The Azure region where the Application Gateway should exist. Changing this forces a new resource to be created.
- Name string
The name of the Application Gateway. Changing this forces a new resource to be created.
- Probes
List<Application
Gateway Probe Args> One or more
probeblocks as defined below.- Redirect
Configurations List<ApplicationGateway Redirect Configuration Args> A
redirect_configurationblock as defined below.- Rewrite
Rule List<ApplicationSets Gateway Rewrite Rule Set Args> One or more
rewrite_rule_setblocks as defined below. Only valid for v2 SKUs.- Ssl
Certificates List<ApplicationGateway Ssl Certificate Args> One or more
ssl_certificateblocks as defined below.- Ssl
Policies List<ApplicationGateway Ssl Policy Args> a
ssl policyblock as defined below.- Dictionary<string, string>
A mapping of tags to assign to the resource.
- Trusted
Root List<ApplicationCertificates Gateway Trusted Root Certificate Args> One or more
trusted_root_certificateblocks as defined below.- Url
Path List<ApplicationMaps Gateway Url Path Map Args> One or more
url_path_mapblocks as defined below.- Waf
Configuration ApplicationGateway Waf Configuration Args A
waf_configurationblock as defined below.- Zones List<string>
A collection of availability zones to spread the Application Gateway over.
- Backend
Address []ApplicationPools Gateway Backend Address Pool One or more
backend_address_poolblocks as defined below.- Backend
Http []ApplicationSettings Gateway Backend Http Setting One or more
backend_http_settingsblocks as defined below.- Frontend
Ip []ApplicationConfigurations Gateway Frontend Ip Configuration One or more
frontend_ip_configurationblocks as defined below.- Frontend
Ports []ApplicationGateway Frontend Port One or more
frontend_portblocks as defined below.- Gateway
Ip []ApplicationConfigurations Gateway Gateway Ip Configuration One or more
gateway_ip_configurationblocks as defined below.- Http
Listeners []ApplicationGateway Http Listener One or more
http_listenerblocks as defined below.- Request
Routing []ApplicationRules Gateway Request Routing Rule One or more
request_routing_ruleblocks as defined below.- Resource
Group stringName The name of the resource group in which to the Application Gateway should exist. Changing this forces a new resource to be created.
- Sku
Application
Gateway Sku A
skublock as defined below.- Authentication
Certificates []ApplicationGateway Authentication Certificate One or more
authentication_certificateblocks as defined below.- Autoscale
Configuration ApplicationGateway Autoscale Configuration A
autoscale_configurationblock as defined below.- Custom
Error []ApplicationConfigurations Gateway Custom Error Configuration One or more
custom_error_configurationblocks as defined below.- Enable
Http2 bool Is HTTP2 enabled on the application gateway resource? Defaults to
false.- Firewall
Policy stringId The resource ID of a firewall policy.
- Identity
Application
Gateway Identity A
identityblock.- Location string
The Azure region where the Application Gateway should exist. Changing this forces a new resource to be created.
- Name string
The name of the Application Gateway. Changing this forces a new resource to be created.
- Probes
[]Application
Gateway Probe One or more
probeblocks as defined below.- Redirect
Configurations []ApplicationGateway Redirect Configuration A
redirect_configurationblock as defined below.- Rewrite
Rule []ApplicationSets Gateway Rewrite Rule Set One or more
rewrite_rule_setblocks as defined below. Only valid for v2 SKUs.- Ssl
Certificates []ApplicationGateway Ssl Certificate One or more
ssl_certificateblocks as defined below.- Ssl
Policies []ApplicationGateway Ssl Policy a
ssl policyblock as defined below.- map[string]string
A mapping of tags to assign to the resource.
- Trusted
Root []ApplicationCertificates Gateway Trusted Root Certificate One or more
trusted_root_certificateblocks as defined below.- Url
Path []ApplicationMaps Gateway Url Path Map One or more
url_path_mapblocks as defined below.- Waf
Configuration ApplicationGateway Waf Configuration A
waf_configurationblock as defined below.- Zones []string
A collection of availability zones to spread the Application Gateway over.
- backend
Address ApplicationPools Gateway Backend Address Pool[] One or more
backend_address_poolblocks as defined below.- backend
Http ApplicationSettings Gateway Backend Http Setting[] One or more
backend_http_settingsblocks as defined below.- frontend
Ip ApplicationConfigurations Gateway Frontend Ip Configuration[] One or more
frontend_ip_configurationblocks as defined below.- frontend
Ports ApplicationGateway Frontend Port[] One or more
frontend_portblocks as defined below.- gateway
Ip ApplicationConfigurations Gateway Gateway Ip Configuration[] One or more
gateway_ip_configurationblocks as defined below.- http
Listeners ApplicationGateway Http Listener[] One or more
http_listenerblocks as defined below.- request
Routing ApplicationRules Gateway Request Routing Rule[] One or more
request_routing_ruleblocks as defined below.- resource
Group stringName The name of the resource group in which to the Application Gateway should exist. Changing this forces a new resource to be created.
- sku
Application
Gateway Sku A
skublock as defined below.- authentication
Certificates ApplicationGateway Authentication Certificate[] One or more
authentication_certificateblocks as defined below.- autoscale
Configuration ApplicationGateway Autoscale Configuration A
autoscale_configurationblock as defined below.- custom
Error ApplicationConfigurations Gateway Custom Error Configuration[] One or more
custom_error_configurationblocks as defined below.- enable
Http2 boolean Is HTTP2 enabled on the application gateway resource? Defaults to
false.- firewall
Policy stringId The resource ID of a firewall policy.
- identity
Application
Gateway Identity A
identityblock.- location string
The Azure region where the Application Gateway should exist. Changing this forces a new resource to be created.
- name string
The name of the Application Gateway. Changing this forces a new resource to be created.
- probes
Application
Gateway Probe[] One or more
probeblocks as defined below.- redirect
Configurations ApplicationGateway Redirect Configuration[] A
redirect_configurationblock as defined below.- rewrite
Rule ApplicationSets Gateway Rewrite Rule Set[] One or more
rewrite_rule_setblocks as defined below. Only valid for v2 SKUs.- ssl
Certificates ApplicationGateway Ssl Certificate[] One or more
ssl_certificateblocks as defined below.- ssl
Policies ApplicationGateway Ssl Policy[] a
ssl policyblock as defined below.- {[key: string]: string}
A mapping of tags to assign to the resource.
- trusted
Root ApplicationCertificates Gateway Trusted Root Certificate[] One or more
trusted_root_certificateblocks as defined below.- url
Path ApplicationMaps Gateway Url Path Map[] One or more
url_path_mapblocks as defined below.- waf
Configuration ApplicationGateway Waf Configuration A
waf_configurationblock as defined below.- zones string[]
A collection of availability zones to spread the Application Gateway over.
- backend_
address_ List[Applicationpools Gateway Backend Address Pool] One or more
backend_address_poolblocks as defined below.- backend_
http_ List[Applicationsettings Gateway Backend Http Setting] One or more
backend_http_settingsblocks as defined below.- frontend_
ip_ List[Applicationconfigurations Gateway Frontend Ip Configuration] One or more
frontend_ip_configurationblocks as defined below.- frontend_
ports List[ApplicationGateway Frontend Port] One or more
frontend_portblocks as defined below.- gateway_
ip_ List[Applicationconfigurations Gateway Gateway Ip Configuration] One or more
gateway_ip_configurationblocks as defined below.- http_
listeners List[ApplicationGateway Http Listener] One or more
http_listenerblocks as defined below.- request_
routing_ List[Applicationrules Gateway Request Routing Rule] One or more
request_routing_ruleblocks as defined below.- resource_
group_ strname The name of the resource group in which to the Application Gateway should exist. Changing this forces a new resource to be created.
- sku
Dict[Application
Gateway Sku] A
skublock as defined below.- authentication_
certificates List[ApplicationGateway Authentication Certificate] One or more
authentication_certificateblocks as defined below.- autoscale_
configuration Dict[ApplicationGateway Autoscale Configuration] A
autoscale_configurationblock as defined below.- custom_
error_ List[Applicationconfigurations Gateway Custom Error Configuration] One or more
custom_error_configurationblocks as defined below.- enable_
http2 bool Is HTTP2 enabled on the application gateway resource? Defaults to
false.- firewall_
policy_ strid The resource ID of a firewall policy.
- identity
Dict[Application
Gateway Identity] A
identityblock.- location str
The Azure region where the Application Gateway should exist. Changing this forces a new resource to be created.
- name str
The name of the Application Gateway. Changing this forces a new resource to be created.
- probes
List[Application
Gateway Probe] One or more
probeblocks as defined below.- redirect_
configurations List[ApplicationGateway Redirect Configuration] A
redirect_configurationblock as defined below.- rewrite_
rule_ List[Applicationsets Gateway Rewrite Rule Set] One or more
rewrite_rule_setblocks as defined below. Only valid for v2 SKUs.- ssl_
certificates List[ApplicationGateway Ssl Certificate] One or more
ssl_certificateblocks as defined below.- ssl_
policies List[ApplicationGateway Ssl Policy] a
ssl policyblock as defined below.- Dict[str, str]
A mapping of tags to assign to the resource.
- trusted_
root_ List[Applicationcertificates Gateway Trusted Root Certificate] One or more
trusted_root_certificateblocks as defined below.- url_
path_ List[Applicationmaps Gateway Url Path Map] One or more
url_path_mapblocks as defined below.- waf_
configuration Dict[ApplicationGateway Waf Configuration] A
waf_configurationblock as defined below.- zones List[str]
A collection of availability zones to spread the Application Gateway over.
Outputs
All input properties are implicitly available as output properties. Additionally, the ApplicationGateway resource produces the following output properties:
Look up an Existing ApplicationGateway Resource
Get an existing ApplicationGateway resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: ApplicationGatewayState, opts?: CustomResourceOptions): ApplicationGatewaystatic get(resource_name, id, opts=None, authentication_certificates=None, autoscale_configuration=None, backend_address_pools=None, backend_http_settings=None, custom_error_configurations=None, enable_http2=None, firewall_policy_id=None, frontend_ip_configurations=None, frontend_ports=None, gateway_ip_configurations=None, http_listeners=None, identity=None, location=None, name=None, probes=None, redirect_configurations=None, request_routing_rules=None, resource_group_name=None, rewrite_rule_sets=None, sku=None, ssl_certificates=None, ssl_policies=None, tags=None, trusted_root_certificates=None, url_path_maps=None, waf_configuration=None, zones=None, __props__=None);func GetApplicationGateway(ctx *Context, name string, id IDInput, state *ApplicationGatewayState, opts ...ResourceOption) (*ApplicationGateway, error)public static ApplicationGateway Get(string name, Input<string> id, ApplicationGatewayState? state, CustomResourceOptions? opts = null)- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
The following state arguments are supported:
- Authentication
Certificates List<ApplicationGateway Authentication Certificate Args> One or more
authentication_certificateblocks as defined below.- Autoscale
Configuration ApplicationGateway Autoscale Configuration Args A
autoscale_configurationblock as defined below.- Backend
Address List<ApplicationPools Gateway Backend Address Pool Args> One or more
backend_address_poolblocks as defined below.- Backend
Http List<ApplicationSettings Gateway Backend Http Setting Args> One or more
backend_http_settingsblocks as defined below.- Custom
Error List<ApplicationConfigurations Gateway Custom Error Configuration Args> One or more
custom_error_configurationblocks as defined below.- Enable
Http2 bool Is HTTP2 enabled on the application gateway resource? Defaults to
false.- Firewall
Policy stringId The resource ID of a firewall policy.
- Frontend
Ip List<ApplicationConfigurations Gateway Frontend Ip Configuration Args> One or more
frontend_ip_configurationblocks as defined below.- Frontend
Ports List<ApplicationGateway Frontend Port Args> One or more
frontend_portblocks as defined below.- Gateway
Ip List<ApplicationConfigurations Gateway Gateway Ip Configuration Args> One or more
gateway_ip_configurationblocks as defined below.- Http
Listeners List<ApplicationGateway Http Listener Args> One or more
http_listenerblocks as defined below.- Identity
Application
Gateway Identity Args A
identityblock.- Location string
The Azure region where the Application Gateway should exist. Changing this forces a new resource to be created.
- Name string
The name of the Application Gateway. Changing this forces a new resource to be created.
- Probes
List<Application
Gateway Probe Args> One or more
probeblocks as defined below.- Redirect
Configurations List<ApplicationGateway Redirect Configuration Args> A
redirect_configurationblock as defined below.- Request
Routing List<ApplicationRules Gateway Request Routing Rule Args> One or more
request_routing_ruleblocks as defined below.- Resource
Group stringName The name of the resource group in which to the Application Gateway should exist. Changing this forces a new resource to be created.
- Rewrite
Rule List<ApplicationSets Gateway Rewrite Rule Set Args> One or more
rewrite_rule_setblocks as defined below. Only valid for v2 SKUs.- Sku
Application
Gateway Sku Args A
skublock as defined below.- Ssl
Certificates List<ApplicationGateway Ssl Certificate Args> One or more
ssl_certificateblocks as defined below.- Ssl
Policies List<ApplicationGateway Ssl Policy Args> a
ssl policyblock as defined below.- Dictionary<string, string>
A mapping of tags to assign to the resource.
- Trusted
Root List<ApplicationCertificates Gateway Trusted Root Certificate Args> One or more
trusted_root_certificateblocks as defined below.- Url
Path List<ApplicationMaps Gateway Url Path Map Args> One or more
url_path_mapblocks as defined below.- Waf
Configuration ApplicationGateway Waf Configuration Args A
waf_configurationblock as defined below.- Zones List<string>
A collection of availability zones to spread the Application Gateway over.
- Authentication
Certificates []ApplicationGateway Authentication Certificate One or more
authentication_certificateblocks as defined below.- Autoscale
Configuration ApplicationGateway Autoscale Configuration A
autoscale_configurationblock as defined below.- Backend
Address []ApplicationPools Gateway Backend Address Pool One or more
backend_address_poolblocks as defined below.- Backend
Http []ApplicationSettings Gateway Backend Http Setting One or more
backend_http_settingsblocks as defined below.- Custom
Error []ApplicationConfigurations Gateway Custom Error Configuration One or more
custom_error_configurationblocks as defined below.- Enable
Http2 bool Is HTTP2 enabled on the application gateway resource? Defaults to
false.- Firewall
Policy stringId The resource ID of a firewall policy.
- Frontend
Ip []ApplicationConfigurations Gateway Frontend Ip Configuration One or more
frontend_ip_configurationblocks as defined below.- Frontend
Ports []ApplicationGateway Frontend Port One or more
frontend_portblocks as defined below.- Gateway
Ip []ApplicationConfigurations Gateway Gateway Ip Configuration One or more
gateway_ip_configurationblocks as defined below.- Http
Listeners []ApplicationGateway Http Listener One or more
http_listenerblocks as defined below.- Identity
Application
Gateway Identity A
identityblock.- Location string
The Azure region where the Application Gateway should exist. Changing this forces a new resource to be created.
- Name string
The name of the Application Gateway. Changing this forces a new resource to be created.
- Probes
[]Application
Gateway Probe One or more
probeblocks as defined below.- Redirect
Configurations []ApplicationGateway Redirect Configuration A
redirect_configurationblock as defined below.- Request
Routing []ApplicationRules Gateway Request Routing Rule One or more
request_routing_ruleblocks as defined below.- Resource
Group stringName The name of the resource group in which to the Application Gateway should exist. Changing this forces a new resource to be created.
- Rewrite
Rule []ApplicationSets Gateway Rewrite Rule Set One or more
rewrite_rule_setblocks as defined below. Only valid for v2 SKUs.- Sku
Application
Gateway Sku A
skublock as defined below.- Ssl
Certificates []ApplicationGateway Ssl Certificate One or more
ssl_certificateblocks as defined below.- Ssl
Policies []ApplicationGateway Ssl Policy a
ssl policyblock as defined below.- map[string]string
A mapping of tags to assign to the resource.
- Trusted
Root []ApplicationCertificates Gateway Trusted Root Certificate One or more
trusted_root_certificateblocks as defined below.- Url
Path []ApplicationMaps Gateway Url Path Map One or more
url_path_mapblocks as defined below.- Waf
Configuration ApplicationGateway Waf Configuration A
waf_configurationblock as defined below.- Zones []string
A collection of availability zones to spread the Application Gateway over.
- authentication
Certificates ApplicationGateway Authentication Certificate[] One or more
authentication_certificateblocks as defined below.- autoscale
Configuration ApplicationGateway Autoscale Configuration A
autoscale_configurationblock as defined below.- backend
Address ApplicationPools Gateway Backend Address Pool[] One or more
backend_address_poolblocks as defined below.- backend
Http ApplicationSettings Gateway Backend Http Setting[] One or more
backend_http_settingsblocks as defined below.- custom
Error ApplicationConfigurations Gateway Custom Error Configuration[] One or more
custom_error_configurationblocks as defined below.- enable
Http2 boolean Is HTTP2 enabled on the application gateway resource? Defaults to
false.- firewall
Policy stringId The resource ID of a firewall policy.
- frontend
Ip ApplicationConfigurations Gateway Frontend Ip Configuration[] One or more
frontend_ip_configurationblocks as defined below.- frontend
Ports ApplicationGateway Frontend Port[] One or more
frontend_portblocks as defined below.- gateway
Ip ApplicationConfigurations Gateway Gateway Ip Configuration[] One or more
gateway_ip_configurationblocks as defined below.- http
Listeners ApplicationGateway Http Listener[] One or more
http_listenerblocks as defined below.- identity
Application
Gateway Identity A
identityblock.- location string
The Azure region where the Application Gateway should exist. Changing this forces a new resource to be created.
- name string
The name of the Application Gateway. Changing this forces a new resource to be created.
- probes
Application
Gateway Probe[] One or more
probeblocks as defined below.- redirect
Configurations ApplicationGateway Redirect Configuration[] A
redirect_configurationblock as defined below.- request
Routing ApplicationRules Gateway Request Routing Rule[] One or more
request_routing_ruleblocks as defined below.- resource
Group stringName The name of the resource group in which to the Application Gateway should exist. Changing this forces a new resource to be created.
- rewrite
Rule ApplicationSets Gateway Rewrite Rule Set[] One or more
rewrite_rule_setblocks as defined below. Only valid for v2 SKUs.- sku
Application
Gateway Sku A
skublock as defined below.- ssl
Certificates ApplicationGateway Ssl Certificate[] One or more
ssl_certificateblocks as defined below.- ssl
Policies ApplicationGateway Ssl Policy[] a
ssl policyblock as defined below.- {[key: string]: string}
A mapping of tags to assign to the resource.
- trusted
Root ApplicationCertificates Gateway Trusted Root Certificate[] One or more
trusted_root_certificateblocks as defined below.- url
Path ApplicationMaps Gateway Url Path Map[] One or more
url_path_mapblocks as defined below.- waf
Configuration ApplicationGateway Waf Configuration A
waf_configurationblock as defined below.- zones string[]
A collection of availability zones to spread the Application Gateway over.
- authentication_
certificates List[ApplicationGateway Authentication Certificate] One or more
authentication_certificateblocks as defined below.- autoscale_
configuration Dict[ApplicationGateway Autoscale Configuration] A
autoscale_configurationblock as defined below.- backend_
address_ List[Applicationpools Gateway Backend Address Pool] One or more
backend_address_poolblocks as defined below.- backend_
http_ List[Applicationsettings Gateway Backend Http Setting] One or more
backend_http_settingsblocks as defined below.- custom_
error_ List[Applicationconfigurations Gateway Custom Error Configuration] One or more
custom_error_configurationblocks as defined below.- enable_
http2 bool Is HTTP2 enabled on the application gateway resource? Defaults to
false.- firewall_
policy_ strid The resource ID of a firewall policy.
- frontend_
ip_ List[Applicationconfigurations Gateway Frontend Ip Configuration] One or more
frontend_ip_configurationblocks as defined below.- frontend_
ports List[ApplicationGateway Frontend Port] One or more
frontend_portblocks as defined below.- gateway_
ip_ List[Applicationconfigurations Gateway Gateway Ip Configuration] One or more
gateway_ip_configurationblocks as defined below.- http_
listeners List[ApplicationGateway Http Listener] One or more
http_listenerblocks as defined below.- identity
Dict[Application
Gateway Identity] A
identityblock.- location str
The Azure region where the Application Gateway should exist. Changing this forces a new resource to be created.
- name str
The name of the Application Gateway. Changing this forces a new resource to be created.
- probes
List[Application
Gateway Probe] One or more
probeblocks as defined below.- redirect_
configurations List[ApplicationGateway Redirect Configuration] A
redirect_configurationblock as defined below.- request_
routing_ List[Applicationrules Gateway Request Routing Rule] One or more
request_routing_ruleblocks as defined below.- resource_
group_ strname The name of the resource group in which to the Application Gateway should exist. Changing this forces a new resource to be created.
- rewrite_
rule_ List[Applicationsets Gateway Rewrite Rule Set] One or more
rewrite_rule_setblocks as defined below. Only valid for v2 SKUs.- sku
Dict[Application
Gateway Sku] A
skublock as defined below.- ssl_
certificates List[ApplicationGateway Ssl Certificate] One or more
ssl_certificateblocks as defined below.- ssl_
policies List[ApplicationGateway Ssl Policy] a
ssl policyblock as defined below.- Dict[str, str]
A mapping of tags to assign to the resource.
- trusted_
root_ List[Applicationcertificates Gateway Trusted Root Certificate] One or more
trusted_root_certificateblocks as defined below.- url_
path_ List[Applicationmaps Gateway Url Path Map] One or more
url_path_mapblocks as defined below.- waf_
configuration Dict[ApplicationGateway Waf Configuration] A
waf_configurationblock as defined below.- zones List[str]
A collection of availability zones to spread the Application Gateway over.
Supporting Types
ApplicationGatewayAuthenticationCertificate
ApplicationGatewayAutoscaleConfiguration
- Min
Capacity int Minimum capacity for autoscaling. Accepted values are in the range
0to100.- Max
Capacity int Maximum capacity for autoscaling. Accepted values are in the range
2to125.
- Min
Capacity int Minimum capacity for autoscaling. Accepted values are in the range
0to100.- Max
Capacity int Maximum capacity for autoscaling. Accepted values are in the range
2to125.
- min
Capacity number Minimum capacity for autoscaling. Accepted values are in the range
0to100.- max
Capacity number Maximum capacity for autoscaling. Accepted values are in the range
2to125.
- min_
capacity float Minimum capacity for autoscaling. Accepted values are in the range
0to100.- max
Capacity float Maximum capacity for autoscaling. Accepted values are in the range
2to125.
ApplicationGatewayBackendAddressPool
- Name string
The name of the Backend Address Pool.
- Fqdns List<string>
A list of FQDN’s which should be part of the Backend Address Pool.
- Id string
The ID of the Rewrite Rule Set
- Ip
Addresses List<string> A list of IP Addresses which should be part of the Backend Address Pool.
ApplicationGatewayBackendHttpSetting
- string
Is Cookie-Based Affinity enabled? Possible values are
EnabledandDisabled.- Name string
The name of the Backend HTTP Settings Collection.
- Port int
The port which should be used for this Backend HTTP Settings Collection.
- Protocol string
The Protocol which should be used. Possible values are
HttpandHttps.- string
The name of the affinity cookie.
- Authentication
Certificates List<ApplicationGateway Backend Http Setting Authentication Certificate Args> One or more
authentication_certificateblocks.- Connection
Draining ApplicationGateway Backend Http Setting Connection Draining Args A
connection_drainingblock as defined below.- Host
Name string Host header to be sent to the backend servers. Cannot be set if
pick_host_name_from_backend_addressis set totrue.- Id string
The ID of the Rewrite Rule Set
- Path string
The Path which should be used as a prefix for all HTTP requests.
- Pick
Host boolName From Backend Address Whether host header should be picked from the host name of the backend server. Defaults to
false.- Probe
Id string The ID of the associated Probe.
- Probe
Name string The name of an associated HTTP Probe.
- Request
Timeout int The request timeout in seconds, which must be between 1 and 86400 seconds.
- Trusted
Root List<string>Certificate Names A list of
trusted_root_certificatenames.
- string
Is Cookie-Based Affinity enabled? Possible values are
EnabledandDisabled.- Name string
The name of the Backend HTTP Settings Collection.
- Port int
The port which should be used for this Backend HTTP Settings Collection.
- Protocol string
The Protocol which should be used. Possible values are
HttpandHttps.- string
The name of the affinity cookie.
- Authentication
Certificates []ApplicationGateway Backend Http Setting Authentication Certificate One or more
authentication_certificateblocks.- Connection
Draining ApplicationGateway Backend Http Setting Connection Draining A
connection_drainingblock as defined below.- Host
Name string Host header to be sent to the backend servers. Cannot be set if
pick_host_name_from_backend_addressis set totrue.- Id string
The ID of the Rewrite Rule Set
- Path string
The Path which should be used as a prefix for all HTTP requests.
- Pick
Host boolName From Backend Address Whether host header should be picked from the host name of the backend server. Defaults to
false.- Probe
Id string The ID of the associated Probe.
- Probe
Name string The name of an associated HTTP Probe.
- Request
Timeout int The request timeout in seconds, which must be between 1 and 86400 seconds.
- Trusted
Root []stringCertificate Names A list of
trusted_root_certificatenames.
- string
Is Cookie-Based Affinity enabled? Possible values are
EnabledandDisabled.- name string
The name of the Backend HTTP Settings Collection.
- port number
The port which should be used for this Backend HTTP Settings Collection.
- protocol string
The Protocol which should be used. Possible values are
HttpandHttps.- string
The name of the affinity cookie.
- authentication
Certificates ApplicationGateway Backend Http Setting Authentication Certificate[] One or more
authentication_certificateblocks.- connection
Draining ApplicationGateway Backend Http Setting Connection Draining A
connection_drainingblock as defined below.- host
Name string Host header to be sent to the backend servers. Cannot be set if
pick_host_name_from_backend_addressis set totrue.- id string
The ID of the Rewrite Rule Set
- path string
The Path which should be used as a prefix for all HTTP requests.
- pick
Host booleanName From Backend Address Whether host header should be picked from the host name of the backend server. Defaults to
false.- probe
Id string The ID of the associated Probe.
- probe
Name string The name of an associated HTTP Probe.
- request
Timeout number The request timeout in seconds, which must be between 1 and 86400 seconds.
- trusted
Root string[]Certificate Names A list of
trusted_root_certificatenames.
- str
Is Cookie-Based Affinity enabled? Possible values are
EnabledandDisabled.- name str
The name of the Backend HTTP Settings Collection.
- port float
The port which should be used for this Backend HTTP Settings Collection.
- protocol str
The Protocol which should be used. Possible values are
HttpandHttps.- str
The name of the affinity cookie.
- authentication_
certificates List[ApplicationGateway Backend Http Setting Authentication Certificate] One or more
authentication_certificateblocks.- connection
Draining Dict[ApplicationGateway Backend Http Setting Connection Draining] A
connection_drainingblock as defined below.- host_
name str Host header to be sent to the backend servers. Cannot be set if
pick_host_name_from_backend_addressis set totrue.- id str
The ID of the Rewrite Rule Set
- path str
The Path which should be used as a prefix for all HTTP requests.
- pick
Host boolName From Backend Address Whether host header should be picked from the host name of the backend server. Defaults to
false.- probe
Name str The name of an associated HTTP Probe.
- probe_
id str The ID of the associated Probe.
- request
Timeout float The request timeout in seconds, which must be between 1 and 86400 seconds.
- trusted
Root List[str]Certificate Names A list of
trusted_root_certificatenames.
ApplicationGatewayBackendHttpSettingAuthenticationCertificate
ApplicationGatewayBackendHttpSettingConnectionDraining
- Drain
Timeout intSec The number of seconds connection draining is active. Acceptable values are from
1second to3600seconds.- Enabled bool
If connection draining is enabled or not.
- Drain
Timeout intSec The number of seconds connection draining is active. Acceptable values are from
1second to3600seconds.- Enabled bool
If connection draining is enabled or not.
- drain
Timeout numberSec The number of seconds connection draining is active. Acceptable values are from
1second to3600seconds.- enabled boolean
If connection draining is enabled or not.
- drain
Timeout floatSec The number of seconds connection draining is active. Acceptable values are from
1second to3600seconds.- enabled bool
If connection draining is enabled or not.
ApplicationGatewayCustomErrorConfiguration
- Custom
Error stringPage Url Error page URL of the application gateway customer error.
- Status
Code string Status code of the application gateway customer error. Possible values are
HttpStatus403andHttpStatus502- Id string
The ID of the Rewrite Rule Set
- Custom
Error stringPage Url Error page URL of the application gateway customer error.
- Status
Code string Status code of the application gateway customer error. Possible values are
HttpStatus403andHttpStatus502- Id string
The ID of the Rewrite Rule Set
- custom
Error stringPage Url Error page URL of the application gateway customer error.
- status
Code string Status code of the application gateway customer error. Possible values are
HttpStatus403andHttpStatus502- id string
The ID of the Rewrite Rule Set
- custom
Error strPage Url Error page URL of the application gateway customer error.
- status
Code str Status code of the application gateway customer error. Possible values are
HttpStatus403andHttpStatus502- id str
The ID of the Rewrite Rule Set
ApplicationGatewayFrontendIpConfiguration
- Name string
The name of the Frontend IP Configuration.
- Id string
The ID of the Rewrite Rule Set
- Private
Ip stringAddress The Private IP Address to use for the Application Gateway.
- Private
Ip stringAddress Allocation The Allocation Method for the Private IP Address. Possible values are
DynamicandStatic.- Public
Ip stringAddress Id The ID of a Public IP Address which the Application Gateway should use.
- Subnet
Id string The ID of the Subnet.
- Name string
The name of the Frontend IP Configuration.
- Id string
The ID of the Rewrite Rule Set
- Private
Ip stringAddress The Private IP Address to use for the Application Gateway.
- Private
Ip stringAddress Allocation The Allocation Method for the Private IP Address. Possible values are
DynamicandStatic.- Public
Ip stringAddress Id The ID of a Public IP Address which the Application Gateway should use.
- Subnet
Id string The ID of the Subnet.
- name string
The name of the Frontend IP Configuration.
- id string
The ID of the Rewrite Rule Set
- private
Ip stringAddress The Private IP Address to use for the Application Gateway.
- private
Ip stringAddress Allocation The Allocation Method for the Private IP Address. Possible values are
DynamicandStatic.- public
Ip stringAddress Id The ID of a Public IP Address which the Application Gateway should use.
- subnet
Id string The ID of the Subnet.
- name str
The name of the Frontend IP Configuration.
- id str
The ID of the Rewrite Rule Set
- private
Ip strAddress Allocation The Allocation Method for the Private IP Address. Possible values are
DynamicandStatic.- private_
ip_ straddress The Private IP Address to use for the Application Gateway.
- public_
ip_ straddress_ id The ID of a Public IP Address which the Application Gateway should use.
- subnet_
id str The ID of the Subnet.
ApplicationGatewayFrontendPort
ApplicationGatewayGatewayIpConfiguration
ApplicationGatewayHttpListener
- Frontend
Ip stringConfiguration Name The Name of the Frontend IP Configuration used for this HTTP Listener.
- Frontend
Port stringName The Name of the Frontend Port use for this HTTP Listener.
- Name string
The Name of the HTTP Listener.
- Protocol string
The Protocol to use for this HTTP Listener. Possible values are
HttpandHttps.- Custom
Error List<ApplicationConfigurations Gateway Http Listener Custom Error Configuration Args> One or more
custom_error_configurationblocks as defined below.- Frontend
Ip stringConfiguration Id The ID of the associated Frontend Configuration.
- Frontend
Port stringId The ID of the associated Frontend Port.
- Host
Name string The Hostname which should be used for this HTTP Listener.
- Host
Names List<string> A list of Hostname(s) should be used for this HTTP Listener. It allows special wildcard characters.
- Id string
The ID of the Rewrite Rule Set
- Require
Sni bool Should Server Name Indication be Required? Defaults to
false.- Ssl
Certificate stringId The ID of the associated SSL Certificate.
- Ssl
Certificate stringName The name of the associated SSL Certificate which should be used for this HTTP Listener.
- Frontend
Ip stringConfiguration Name The Name of the Frontend IP Configuration used for this HTTP Listener.
- Frontend
Port stringName The Name of the Frontend Port use for this HTTP Listener.
- Name string
The Name of the HTTP Listener.
- Protocol string
The Protocol to use for this HTTP Listener. Possible values are
HttpandHttps.- Custom
Error []ApplicationConfigurations Gateway Http Listener Custom Error Configuration One or more
custom_error_configurationblocks as defined below.- Frontend
Ip stringConfiguration Id The ID of the associated Frontend Configuration.
- Frontend
Port stringId The ID of the associated Frontend Port.
- Host
Name string The Hostname which should be used for this HTTP Listener.
- Host
Names []string A list of Hostname(s) should be used for this HTTP Listener. It allows special wildcard characters.
- Id string
The ID of the Rewrite Rule Set
- Require
Sni bool Should Server Name Indication be Required? Defaults to
false.- Ssl
Certificate stringId The ID of the associated SSL Certificate.
- Ssl
Certificate stringName The name of the associated SSL Certificate which should be used for this HTTP Listener.
- frontend
Ip stringConfiguration Name The Name of the Frontend IP Configuration used for this HTTP Listener.
- frontend
Port stringName The Name of the Frontend Port use for this HTTP Listener.
- name string
The Name of the HTTP Listener.
- protocol string
The Protocol to use for this HTTP Listener. Possible values are
HttpandHttps.- custom
Error ApplicationConfigurations Gateway Http Listener Custom Error Configuration[] One or more
custom_error_configurationblocks as defined below.- frontend
Ip stringConfiguration Id The ID of the associated Frontend Configuration.
- frontend
Port stringId The ID of the associated Frontend Port.
- host
Name string The Hostname which should be used for this HTTP Listener.
- host
Names string[] A list of Hostname(s) should be used for this HTTP Listener. It allows special wildcard characters.
- id string
The ID of the Rewrite Rule Set
- require
Sni boolean Should Server Name Indication be Required? Defaults to
false.- ssl
Certificate stringId The ID of the associated SSL Certificate.
- ssl
Certificate stringName The name of the associated SSL Certificate which should be used for this HTTP Listener.
- frontend
Port strName The Name of the Frontend Port use for this HTTP Listener.
- frontend_
ip_ strconfiguration_ name The Name of the Frontend IP Configuration used for this HTTP Listener.
- name str
The Name of the HTTP Listener.
- protocol str
The Protocol to use for this HTTP Listener. Possible values are
HttpandHttps.- custom_
error_ List[Applicationconfigurations Gateway Http Listener Custom Error Configuration] One or more
custom_error_configurationblocks as defined below.- frontend
Port strId The ID of the associated Frontend Port.
- frontend_
ip_ strconfiguration_ id The ID of the associated Frontend Configuration.
- host_
name str The Hostname which should be used for this HTTP Listener.
- host_
names List[str] A list of Hostname(s) should be used for this HTTP Listener. It allows special wildcard characters.
- id str
The ID of the Rewrite Rule Set
- require
Sni bool Should Server Name Indication be Required? Defaults to
false.- ssl
Certificate strId The ID of the associated SSL Certificate.
- ssl
Certificate strName The name of the associated SSL Certificate which should be used for this HTTP Listener.
ApplicationGatewayHttpListenerCustomErrorConfiguration
- Custom
Error stringPage Url Error page URL of the application gateway customer error.
- Status
Code string Status code of the application gateway customer error. Possible values are
HttpStatus403andHttpStatus502- Id string
The ID of the Rewrite Rule Set
- Custom
Error stringPage Url Error page URL of the application gateway customer error.
- Status
Code string Status code of the application gateway customer error. Possible values are
HttpStatus403andHttpStatus502- Id string
The ID of the Rewrite Rule Set
- custom
Error stringPage Url Error page URL of the application gateway customer error.
- status
Code string Status code of the application gateway customer error. Possible values are
HttpStatus403andHttpStatus502- id string
The ID of the Rewrite Rule Set
- custom
Error strPage Url Error page URL of the application gateway customer error.
- status
Code str Status code of the application gateway customer error. Possible values are
HttpStatus403andHttpStatus502- id str
The ID of the Rewrite Rule Set
ApplicationGatewayIdentity
- Identity
Ids string Specifies a list with a single user managed identity id to be assigned to the Application Gateway.
- Type string
The Managed Service Identity Type of this Application Gateway. The only possible value is
UserAssigned. Defaults toUserAssigned.
- Identity
Ids string Specifies a list with a single user managed identity id to be assigned to the Application Gateway.
- Type string
The Managed Service Identity Type of this Application Gateway. The only possible value is
UserAssigned. Defaults toUserAssigned.
- identity
Ids string Specifies a list with a single user managed identity id to be assigned to the Application Gateway.
- type string
The Managed Service Identity Type of this Application Gateway. The only possible value is
UserAssigned. Defaults toUserAssigned.
- identity
Ids str Specifies a list with a single user managed identity id to be assigned to the Application Gateway.
- type str
The Managed Service Identity Type of this Application Gateway. The only possible value is
UserAssigned. Defaults toUserAssigned.
ApplicationGatewayProbe
- Interval int
The Interval between two consecutive probes in seconds. Possible values range from 1 second to a maximum of 86,400 seconds.
- Name string
The Name of the Probe.
- Path string
The Path used for this Probe.
- Protocol string
The Protocol used for this Probe. Possible values are
HttpandHttps.- Timeout int
The Timeout used for this Probe, which indicates when a probe becomes unhealthy. Possible values range from 1 second to a maximum of 86,400 seconds.
- Unhealthy
Threshold int The Unhealthy Threshold for this Probe, which indicates the amount of retries which should be attempted before a node is deemed unhealthy. Possible values are from 1 - 20 seconds.
- Host string
The Hostname used for this Probe. If the Application Gateway is configured for a single site, by default the Host name should be specified as ‘127.0.0.1’, unless otherwise configured in custom probe. Cannot be set if
pick_host_name_from_backend_http_settingsis set totrue.- Id string
The ID of the Rewrite Rule Set
- Match
Application
Gateway Probe Match Args A
matchblock as defined above.- Minimum
Servers int The minimum number of servers that are always marked as healthy. Defaults to
0.- Pick
Host boolName From Backend Http Settings Whether the host header should be picked from the backend http settings. Defaults to
false.
- Interval int
The Interval between two consecutive probes in seconds. Possible values range from 1 second to a maximum of 86,400 seconds.
- Name string
The Name of the Probe.
- Path string
The Path used for this Probe.
- Protocol string
The Protocol used for this Probe. Possible values are
HttpandHttps.- Timeout int
The Timeout used for this Probe, which indicates when a probe becomes unhealthy. Possible values range from 1 second to a maximum of 86,400 seconds.
- Unhealthy
Threshold int The Unhealthy Threshold for this Probe, which indicates the amount of retries which should be attempted before a node is deemed unhealthy. Possible values are from 1 - 20 seconds.
- Host string
The Hostname used for this Probe. If the Application Gateway is configured for a single site, by default the Host name should be specified as ‘127.0.0.1’, unless otherwise configured in custom probe. Cannot be set if
pick_host_name_from_backend_http_settingsis set totrue.- Id string
The ID of the Rewrite Rule Set
- Match
Application
Gateway Probe Match A
matchblock as defined above.- Minimum
Servers int The minimum number of servers that are always marked as healthy. Defaults to
0.- Pick
Host boolName From Backend Http Settings Whether the host header should be picked from the backend http settings. Defaults to
false.
- interval number
The Interval between two consecutive probes in seconds. Possible values range from 1 second to a maximum of 86,400 seconds.
- name string
The Name of the Probe.
- path string
The Path used for this Probe.
- protocol string
The Protocol used for this Probe. Possible values are
HttpandHttps.- timeout number
The Timeout used for this Probe, which indicates when a probe becomes unhealthy. Possible values range from 1 second to a maximum of 86,400 seconds.
- unhealthy
Threshold number The Unhealthy Threshold for this Probe, which indicates the amount of retries which should be attempted before a node is deemed unhealthy. Possible values are from 1 - 20 seconds.
- host string
The Hostname used for this Probe. If the Application Gateway is configured for a single site, by default the Host name should be specified as ‘127.0.0.1’, unless otherwise configured in custom probe. Cannot be set if
pick_host_name_from_backend_http_settingsis set totrue.- id string
The ID of the Rewrite Rule Set
- match
Application
Gateway Probe Match A
matchblock as defined above.- minimum
Servers number The minimum number of servers that are always marked as healthy. Defaults to
0.- pick
Host booleanName From Backend Http Settings Whether the host header should be picked from the backend http settings. Defaults to
false.
- interval float
The Interval between two consecutive probes in seconds. Possible values range from 1 second to a maximum of 86,400 seconds.
- name str
The Name of the Probe.
- path str
The Path used for this Probe.
- protocol str
The Protocol used for this Probe. Possible values are
HttpandHttps.- timeout float
The Timeout used for this Probe, which indicates when a probe becomes unhealthy. Possible values range from 1 second to a maximum of 86,400 seconds.
- unhealthy
Threshold float The Unhealthy Threshold for this Probe, which indicates the amount of retries which should be attempted before a node is deemed unhealthy. Possible values are from 1 - 20 seconds.
- host str
The Hostname used for this Probe. If the Application Gateway is configured for a single site, by default the Host name should be specified as ‘127.0.0.1’, unless otherwise configured in custom probe. Cannot be set if
pick_host_name_from_backend_http_settingsis set totrue.- id str
The ID of the Rewrite Rule Set
- match
Dict[Application
Gateway Probe Match] A
matchblock as defined above.- minimum
Servers float The minimum number of servers that are always marked as healthy. Defaults to
0.- pick
Host boolName From Backend Http Settings Whether the host header should be picked from the backend http settings. Defaults to
false.
ApplicationGatewayProbeMatch
- Body string
A snippet from the Response Body which must be present in the Response..
- Status
Codes List<string> A list of allowed status codes for this Health Probe.
- Body string
A snippet from the Response Body which must be present in the Response..
- Status
Codes []string A list of allowed status codes for this Health Probe.
- body string
A snippet from the Response Body which must be present in the Response..
- status
Codes string[] A list of allowed status codes for this Health Probe.
- body str
A snippet from the Response Body which must be present in the Response..
- status
Codes List[str] A list of allowed status codes for this Health Probe.
ApplicationGatewayRedirectConfiguration
- Name string
Unique name of the redirect configuration block
- Redirect
Type string The type of redirect. Possible values are
Permanent,Temporary,FoundandSeeOther- Id string
The ID of the Rewrite Rule Set
- Include
Path bool Whether or not to include the path in the redirected Url. Defaults to
false- Include
Query boolString Whether or not to include the query string in the redirected Url. Default to
false- Target
Listener stringId - Target
Listener stringName The name of the listener to redirect to. Cannot be set if
target_urlis set.- Target
Url string The Url to redirect the request to. Cannot be set if
target_listener_nameis set.
- Name string
Unique name of the redirect configuration block
- Redirect
Type string The type of redirect. Possible values are
Permanent,Temporary,FoundandSeeOther- Id string
The ID of the Rewrite Rule Set
- Include
Path bool Whether or not to include the path in the redirected Url. Defaults to
false- Include
Query boolString Whether or not to include the query string in the redirected Url. Default to
false- Target
Listener stringId - Target
Listener stringName The name of the listener to redirect to. Cannot be set if
target_urlis set.- Target
Url string The Url to redirect the request to. Cannot be set if
target_listener_nameis set.
- name string
Unique name of the redirect configuration block
- redirect
Type string The type of redirect. Possible values are
Permanent,Temporary,FoundandSeeOther- id string
The ID of the Rewrite Rule Set
- include
Path boolean Whether or not to include the path in the redirected Url. Defaults to
false- include
Query booleanString Whether or not to include the query string in the redirected Url. Default to
false- target
Listener stringId - target
Listener stringName The name of the listener to redirect to. Cannot be set if
target_urlis set.- target
Url string The Url to redirect the request to. Cannot be set if
target_listener_nameis set.
- name str
Unique name of the redirect configuration block
- redirect
Type str The type of redirect. Possible values are
Permanent,Temporary,FoundandSeeOther- id str
The ID of the Rewrite Rule Set
- include
Path bool Whether or not to include the path in the redirected Url. Defaults to
false- include
Query boolString Whether or not to include the query string in the redirected Url. Default to
false- target
Listener strId - target
Listener strName The name of the listener to redirect to. Cannot be set if
target_urlis set.- target
Url str The Url to redirect the request to. Cannot be set if
target_listener_nameis set.
ApplicationGatewayRequestRoutingRule
- Http
Listener stringName The Name of the HTTP Listener which should be used for this Routing Rule.
- Name string
The Name of this Request Routing Rule.
- Rule
Type string The Type of Routing that should be used for this Rule. Possible values are
BasicandPathBasedRouting.- Backend
Address stringPool Id The ID of the associated Backend Address Pool.
- Backend
Address stringPool Name The Name of the Backend Address Pool which should be used for this Routing Rule. Cannot be set if
redirect_configuration_nameis set.- Backend
Http stringSettings Id The ID of the associated Backend HTTP Settings Configuration.
- Backend
Http stringSettings Name The Name of the Backend HTTP Settings Collection which should be used for this Routing Rule. Cannot be set if
redirect_configuration_nameis set.- Http
Listener stringId The ID of the associated HTTP Listener.
- Id string
The ID of the Rewrite Rule Set
- Redirect
Configuration stringId The ID of the associated Redirect Configuration.
- Redirect
Configuration stringName The Name of the Redirect Configuration which should be used for this Routing Rule. Cannot be set if either
backend_address_pool_nameorbackend_http_settings_nameis set.- Rewrite
Rule stringSet Id The ID of the associated Rewrite Rule Set.
- Rewrite
Rule stringSet Name The Name of the Rewrite Rule Set which should be used for this Routing Rule. Only valid for v2 SKUs.
- Url
Path stringMap Id The ID of the associated URL Path Map.
- Url
Path stringMap Name The Name of the URL Path Map which should be associated with this Routing Rule.
- Http
Listener stringName The Name of the HTTP Listener which should be used for this Routing Rule.
- Name string
The Name of this Request Routing Rule.
- Rule
Type string The Type of Routing that should be used for this Rule. Possible values are
BasicandPathBasedRouting.- Backend
Address stringPool Id The ID of the associated Backend Address Pool.
- Backend
Address stringPool Name The Name of the Backend Address Pool which should be used for this Routing Rule. Cannot be set if
redirect_configuration_nameis set.- Backend
Http stringSettings Id The ID of the associated Backend HTTP Settings Configuration.
- Backend
Http stringSettings Name The Name of the Backend HTTP Settings Collection which should be used for this Routing Rule. Cannot be set if
redirect_configuration_nameis set.- Http
Listener stringId The ID of the associated HTTP Listener.
- Id string
The ID of the Rewrite Rule Set
- Redirect
Configuration stringId The ID of the associated Redirect Configuration.
- Redirect
Configuration stringName The Name of the Redirect Configuration which should be used for this Routing Rule. Cannot be set if either
backend_address_pool_nameorbackend_http_settings_nameis set.- Rewrite
Rule stringSet Id The ID of the associated Rewrite Rule Set.
- Rewrite
Rule stringSet Name The Name of the Rewrite Rule Set which should be used for this Routing Rule. Only valid for v2 SKUs.
- Url
Path stringMap Id The ID of the associated URL Path Map.
- Url
Path stringMap Name The Name of the URL Path Map which should be associated with this Routing Rule.
- http
Listener stringName The Name of the HTTP Listener which should be used for this Routing Rule.
- name string
The Name of this Request Routing Rule.
- rule
Type string The Type of Routing that should be used for this Rule. Possible values are
BasicandPathBasedRouting.- backend
Address stringPool Id The ID of the associated Backend Address Pool.
- backend
Address stringPool Name The Name of the Backend Address Pool which should be used for this Routing Rule. Cannot be set if
redirect_configuration_nameis set.- backend
Http stringSettings Id The ID of the associated Backend HTTP Settings Configuration.
- backend
Http stringSettings Name The Name of the Backend HTTP Settings Collection which should be used for this Routing Rule. Cannot be set if
redirect_configuration_nameis set.- http
Listener stringId The ID of the associated HTTP Listener.
- id string
The ID of the Rewrite Rule Set
- redirect
Configuration stringId The ID of the associated Redirect Configuration.
- redirect
Configuration stringName The Name of the Redirect Configuration which should be used for this Routing Rule. Cannot be set if either
backend_address_pool_nameorbackend_http_settings_nameis set.- rewrite
Rule stringSet Id The ID of the associated Rewrite Rule Set.
- rewrite
Rule stringSet Name The Name of the Rewrite Rule Set which should be used for this Routing Rule. Only valid for v2 SKUs.
- url
Path stringMap Id The ID of the associated URL Path Map.
- url
Path stringMap Name The Name of the URL Path Map which should be associated with this Routing Rule.
- http
Listener strName The Name of the HTTP Listener which should be used for this Routing Rule.
- name str
The Name of this Request Routing Rule.
- rule
Type str The Type of Routing that should be used for this Rule. Possible values are
BasicandPathBasedRouting.- backend
Address strPool Name The Name of the Backend Address Pool which should be used for this Routing Rule. Cannot be set if
redirect_configuration_nameis set.- backend
Http strSettings Id The ID of the associated Backend HTTP Settings Configuration.
- backend
Http strSettings Name The Name of the Backend HTTP Settings Collection which should be used for this Routing Rule. Cannot be set if
redirect_configuration_nameis set.- backend_
address_ strpool_ id The ID of the associated Backend Address Pool.
- http
Listener strId The ID of the associated HTTP Listener.
- id str
The ID of the Rewrite Rule Set
- redirect
Configuration strId The ID of the associated Redirect Configuration.
- redirect
Configuration strName The Name of the Redirect Configuration which should be used for this Routing Rule. Cannot be set if either
backend_address_pool_nameorbackend_http_settings_nameis set.- rewrite
Rule strSet Id The ID of the associated Rewrite Rule Set.
- rewrite
Rule strSet Name The Name of the Rewrite Rule Set which should be used for this Routing Rule. Only valid for v2 SKUs.
- url
Path strMap Id The ID of the associated URL Path Map.
- url
Path strMap Name The Name of the URL Path Map which should be associated with this Routing Rule.
ApplicationGatewayRewriteRuleSet
- Name string
Unique name of the rewrite rule set block
- Id string
The ID of the Rewrite Rule Set
- Rewrite
Rules List<ApplicationGateway Rewrite Rule Set Rewrite Rule Args> One or more
rewrite_ruleblocks as defined above.
- Name string
Unique name of the rewrite rule set block
- Id string
The ID of the Rewrite Rule Set
- Rewrite
Rules []ApplicationGateway Rewrite Rule Set Rewrite Rule One or more
rewrite_ruleblocks as defined above.
- name string
Unique name of the rewrite rule set block
- id string
The ID of the Rewrite Rule Set
- rewrite
Rules ApplicationGateway Rewrite Rule Set Rewrite Rule[] One or more
rewrite_ruleblocks as defined above.
- name str
Unique name of the rewrite rule set block
- id str
The ID of the Rewrite Rule Set
- rewrite
Rules List[ApplicationGateway Rewrite Rule Set Rewrite Rule] One or more
rewrite_ruleblocks as defined above.
ApplicationGatewayRewriteRuleSetRewriteRule
- Name string
Unique name of the rewrite rule block
- Rule
Sequence int Rule sequence of the rewrite rule that determines the order of execution in a set.
- Conditions
List<Application
Gateway Rewrite Rule Set Rewrite Rule Condition Args> One or more
conditionblocks as defined above.- Request
Header List<ApplicationConfigurations Gateway Rewrite Rule Set Rewrite Rule Request Header Configuration Args> One or more
request_header_configurationblocks as defined above.- Response
Header List<ApplicationConfigurations Gateway Rewrite Rule Set Rewrite Rule Response Header Configuration Args> One or more
response_header_configurationblocks as defined above.
- Name string
Unique name of the rewrite rule block
- Rule
Sequence int Rule sequence of the rewrite rule that determines the order of execution in a set.
- Conditions
[]Application
Gateway Rewrite Rule Set Rewrite Rule Condition One or more
conditionblocks as defined above.- Request
Header []ApplicationConfigurations Gateway Rewrite Rule Set Rewrite Rule Request Header Configuration One or more
request_header_configurationblocks as defined above.- Response
Header []ApplicationConfigurations Gateway Rewrite Rule Set Rewrite Rule Response Header Configuration One or more
response_header_configurationblocks as defined above.
- name string
Unique name of the rewrite rule block
- rule
Sequence number Rule sequence of the rewrite rule that determines the order of execution in a set.
- conditions
Application
Gateway Rewrite Rule Set Rewrite Rule Condition[] One or more
conditionblocks as defined above.- request
Header ApplicationConfigurations Gateway Rewrite Rule Set Rewrite Rule Request Header Configuration[] One or more
request_header_configurationblocks as defined above.- response
Header ApplicationConfigurations Gateway Rewrite Rule Set Rewrite Rule Response Header Configuration[] One or more
response_header_configurationblocks as defined above.
- name str
Unique name of the rewrite rule block
- rule
Sequence float Rule sequence of the rewrite rule that determines the order of execution in a set.
- conditions
List[Application
Gateway Rewrite Rule Set Rewrite Rule Condition] One or more
conditionblocks as defined above.- request
Header List[ApplicationConfigurations Gateway Rewrite Rule Set Rewrite Rule Request Header Configuration] One or more
request_header_configurationblocks as defined above.- response
Header List[ApplicationConfigurations Gateway Rewrite Rule Set Rewrite Rule Response Header Configuration] One or more
response_header_configurationblocks as defined above.
ApplicationGatewayRewriteRuleSetRewriteRuleCondition
- Pattern string
The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.
- Variable string
The variable of the condition.
- Ignore
Case bool Perform a case in-sensitive comparison. Defaults to
false- Negate bool
Negate the result of the condition evaluation. Defaults to
false
- Pattern string
The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.
- Variable string
The variable of the condition.
- Ignore
Case bool Perform a case in-sensitive comparison. Defaults to
false- Negate bool
Negate the result of the condition evaluation. Defaults to
false
- pattern string
The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.
- variable string
The variable of the condition.
- ignore
Case boolean Perform a case in-sensitive comparison. Defaults to
false- negate boolean
Negate the result of the condition evaluation. Defaults to
false
- pattern str
The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.
- variable str
The variable of the condition.
- ignore
Case bool Perform a case in-sensitive comparison. Defaults to
false- negate bool
Negate the result of the condition evaluation. Defaults to
false
ApplicationGatewayRewriteRuleSetRewriteRuleRequestHeaderConfiguration
- Header
Name string Header name of the header configuration.
- Header
Value string Header value of the header configuration. To delete a request header set this property to an empty string.
- Header
Name string Header name of the header configuration.
- Header
Value string Header value of the header configuration. To delete a request header set this property to an empty string.
- header
Name string Header name of the header configuration.
- header
Value string Header value of the header configuration. To delete a request header set this property to an empty string.
- header
Name str Header name of the header configuration.
- header
Value str Header value of the header configuration. To delete a request header set this property to an empty string.
ApplicationGatewayRewriteRuleSetRewriteRuleResponseHeaderConfiguration
- Header
Name string Header name of the header configuration.
- Header
Value string Header value of the header configuration. To delete a response header set this property to an empty string.
- Header
Name string Header name of the header configuration.
- Header
Value string Header value of the header configuration. To delete a response header set this property to an empty string.
- header
Name string Header name of the header configuration.
- header
Value string Header value of the header configuration. To delete a response header set this property to an empty string.
- header
Name str Header name of the header configuration.
- header
Value str Header value of the header configuration. To delete a response header set this property to an empty string.
ApplicationGatewaySku
- Name string
The Name of the SKU to use for this Application Gateway. Possible values are
Standard_Small,Standard_Medium,Standard_Large,Standard_v2,WAF_Medium,WAF_Large, andWAF_v2.- Tier string
The Tier of the SKU to use for this Application Gateway. Possible values are
Standard,Standard_v2,WAFandWAF_v2.- Capacity int
The Capacity of the SKU to use for this Application Gateway. When using a V1 SKU this value must be between 1 and 32, and 1 to 125 for a V2 SKU. This property is optional if
autoscale_configurationis set.
- Name string
The Name of the SKU to use for this Application Gateway. Possible values are
Standard_Small,Standard_Medium,Standard_Large,Standard_v2,WAF_Medium,WAF_Large, andWAF_v2.- Tier string
The Tier of the SKU to use for this Application Gateway. Possible values are
Standard,Standard_v2,WAFandWAF_v2.- Capacity int
The Capacity of the SKU to use for this Application Gateway. When using a V1 SKU this value must be between 1 and 32, and 1 to 125 for a V2 SKU. This property is optional if
autoscale_configurationis set.
- name string
The Name of the SKU to use for this Application Gateway. Possible values are
Standard_Small,Standard_Medium,Standard_Large,Standard_v2,WAF_Medium,WAF_Large, andWAF_v2.- tier string
The Tier of the SKU to use for this Application Gateway. Possible values are
Standard,Standard_v2,WAFandWAF_v2.- capacity number
The Capacity of the SKU to use for this Application Gateway. When using a V1 SKU this value must be between 1 and 32, and 1 to 125 for a V2 SKU. This property is optional if
autoscale_configurationis set.
- name str
The Name of the SKU to use for this Application Gateway. Possible values are
Standard_Small,Standard_Medium,Standard_Large,Standard_v2,WAF_Medium,WAF_Large, andWAF_v2.- tier str
The Tier of the SKU to use for this Application Gateway. Possible values are
Standard,Standard_v2,WAFandWAF_v2.- capacity float
The Capacity of the SKU to use for this Application Gateway. When using a V1 SKU this value must be between 1 and 32, and 1 to 125 for a V2 SKU. This property is optional if
autoscale_configurationis set.
ApplicationGatewaySslCertificate
- Name string
The Name of the SSL certificate that is unique within this Application Gateway
- Data string
PFX certificate. Required if
key_vault_secret_idis not set.- Id string
The ID of the Rewrite Rule Set
- Key
Vault stringSecret Id Secret Id of (base-64 encoded unencrypted pfx)
SecretorCertificateobject stored in Azure KeyVault. You need to enable soft delete for keyvault to use this feature. Required ifdatais not set.- Password string
Password for the pfx file specified in data. Required if
datais set.- Public
Cert stringData The Public Certificate Data associated with the SSL Certificate.
- Name string
The Name of the SSL certificate that is unique within this Application Gateway
- Data string
PFX certificate. Required if
key_vault_secret_idis not set.- Id string
The ID of the Rewrite Rule Set
- Key
Vault stringSecret Id Secret Id of (base-64 encoded unencrypted pfx)
SecretorCertificateobject stored in Azure KeyVault. You need to enable soft delete for keyvault to use this feature. Required ifdatais not set.- Password string
Password for the pfx file specified in data. Required if
datais set.- Public
Cert stringData The Public Certificate Data associated with the SSL Certificate.
- name string
The Name of the SSL certificate that is unique within this Application Gateway
- data string
PFX certificate. Required if
key_vault_secret_idis not set.- id string
The ID of the Rewrite Rule Set
- key
Vault stringSecret Id Secret Id of (base-64 encoded unencrypted pfx)
SecretorCertificateobject stored in Azure KeyVault. You need to enable soft delete for keyvault to use this feature. Required ifdatais not set.- password string
Password for the pfx file specified in data. Required if
datais set.- public
Cert stringData The Public Certificate Data associated with the SSL Certificate.
- name str
The Name of the SSL certificate that is unique within this Application Gateway
- data str
PFX certificate. Required if
key_vault_secret_idis not set.- id str
The ID of the Rewrite Rule Set
- key_
vault_ strsecret_ id Secret Id of (base-64 encoded unencrypted pfx)
SecretorCertificateobject stored in Azure KeyVault. You need to enable soft delete for keyvault to use this feature. Required ifdatais not set.- password str
Password for the pfx file specified in data. Required if
datais set.- public
Cert strData The Public Certificate Data associated with the SSL Certificate.
ApplicationGatewaySslPolicy
- Cipher
Suites List<string> A List of accepted cipher suites. Possible values are:
TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_128_CBC_SHA256,TLS_DHE_DSS_WITH_AES_256_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA256,TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256andTLS_RSA_WITH_AES_256_GCM_SHA384.- Disabled
Protocols List<string> A list of SSL Protocols which should be disabled on this Application Gateway. Possible values are
TLSv1_0,TLSv1_1andTLSv1_2.- Min
Protocol stringVersion The minimal TLS version. Possible values are
TLSv1_0,TLSv1_1andTLSv1_2.- Policy
Name string The Name of the Policy e.g AppGwSslPolicy20170401S. Required if
policy_typeis set toPredefined. Possible values can change over time and are published here https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-ssl-policy-overview. Not compatible withdisabled_protocols.- Policy
Type string The Type of the Policy. Possible values are
PredefinedandCustom.
- Cipher
Suites []string A List of accepted cipher suites. Possible values are:
TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_128_CBC_SHA256,TLS_DHE_DSS_WITH_AES_256_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA256,TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256andTLS_RSA_WITH_AES_256_GCM_SHA384.- Disabled
Protocols []string A list of SSL Protocols which should be disabled on this Application Gateway. Possible values are
TLSv1_0,TLSv1_1andTLSv1_2.- Min
Protocol stringVersion The minimal TLS version. Possible values are
TLSv1_0,TLSv1_1andTLSv1_2.- Policy
Name string The Name of the Policy e.g AppGwSslPolicy20170401S. Required if
policy_typeis set toPredefined. Possible values can change over time and are published here https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-ssl-policy-overview. Not compatible withdisabled_protocols.- Policy
Type string The Type of the Policy. Possible values are
PredefinedandCustom.
- cipher
Suites string[] A List of accepted cipher suites. Possible values are:
TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_128_CBC_SHA256,TLS_DHE_DSS_WITH_AES_256_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA256,TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256andTLS_RSA_WITH_AES_256_GCM_SHA384.- disabled
Protocols string[] A list of SSL Protocols which should be disabled on this Application Gateway. Possible values are
TLSv1_0,TLSv1_1andTLSv1_2.- min
Protocol stringVersion The minimal TLS version. Possible values are
TLSv1_0,TLSv1_1andTLSv1_2.- policy
Name string The Name of the Policy e.g AppGwSslPolicy20170401S. Required if
policy_typeis set toPredefined. Possible values can change over time and are published here https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-ssl-policy-overview. Not compatible withdisabled_protocols.- policy
Type string The Type of the Policy. Possible values are
PredefinedandCustom.
- cipher
Suites List[str] A List of accepted cipher suites. Possible values are:
TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_128_CBC_SHA256,TLS_DHE_DSS_WITH_AES_256_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA256,TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256andTLS_RSA_WITH_AES_256_GCM_SHA384.- disabled
Protocols List[str] A list of SSL Protocols which should be disabled on this Application Gateway. Possible values are
TLSv1_0,TLSv1_1andTLSv1_2.- min
Protocol strVersion The minimal TLS version. Possible values are
TLSv1_0,TLSv1_1andTLSv1_2.- policy
Name str The Name of the Policy e.g AppGwSslPolicy20170401S. Required if
policy_typeis set toPredefined. Possible values can change over time and are published here https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-ssl-policy-overview. Not compatible withdisabled_protocols.- policy_
type str The Type of the Policy. Possible values are
PredefinedandCustom.
ApplicationGatewayTrustedRootCertificate
ApplicationGatewayUrlPathMap
- Name string
The Name of the URL Path Map.
- Path
Rules List<ApplicationGateway Url Path Map Path Rule Args> One or more
path_ruleblocks as defined above.- Default
Backend stringAddress Pool Id The ID of the Default Backend Address Pool.
- Default
Backend stringAddress Pool Name The Name of the Default Backend Address Pool which should be used for this URL Path Map. Cannot be set if
default_redirect_configuration_nameis set.- Default
Backend stringHttp Settings Id The ID of the Default Backend HTTP Settings Collection.
- Default
Backend stringHttp Settings Name The Name of the Default Backend HTTP Settings Collection which should be used for this URL Path Map. Cannot be set if
default_redirect_configuration_nameis set.- Default
Redirect stringConfiguration Id The ID of the Default Redirect Configuration.
- Default
Redirect stringConfiguration Name The Name of the Default Redirect Configuration which should be used for this URL Path Map. Cannot be set if either
default_backend_address_pool_nameordefault_backend_http_settings_nameis set.- Default
Rewrite stringRule Set Id - Default
Rewrite stringRule Set Name The Name of the Default Rewrite Rule Set which should be used for this URL Path Map. Only valid for v2 SKUs.
- Id string
The ID of the Rewrite Rule Set
- Name string
The Name of the URL Path Map.
- Path
Rules []ApplicationGateway Url Path Map Path Rule One or more
path_ruleblocks as defined above.- Default
Backend stringAddress Pool Id The ID of the Default Backend Address Pool.
- Default
Backend stringAddress Pool Name The Name of the Default Backend Address Pool which should be used for this URL Path Map. Cannot be set if
default_redirect_configuration_nameis set.- Default
Backend stringHttp Settings Id The ID of the Default Backend HTTP Settings Collection.
- Default
Backend stringHttp Settings Name The Name of the Default Backend HTTP Settings Collection which should be used for this URL Path Map. Cannot be set if
default_redirect_configuration_nameis set.- Default
Redirect stringConfiguration Id The ID of the Default Redirect Configuration.
- Default
Redirect stringConfiguration Name The Name of the Default Redirect Configuration which should be used for this URL Path Map. Cannot be set if either
default_backend_address_pool_nameordefault_backend_http_settings_nameis set.- Default
Rewrite stringRule Set Id - Default
Rewrite stringRule Set Name The Name of the Default Rewrite Rule Set which should be used for this URL Path Map. Only valid for v2 SKUs.
- Id string
The ID of the Rewrite Rule Set
- name string
The Name of the URL Path Map.
- path
Rules ApplicationGateway Url Path Map Path Rule[] One or more
path_ruleblocks as defined above.- default
Backend stringAddress Pool Id The ID of the Default Backend Address Pool.
- default
Backend stringAddress Pool Name The Name of the Default Backend Address Pool which should be used for this URL Path Map. Cannot be set if
default_redirect_configuration_nameis set.- default
Backend stringHttp Settings Id The ID of the Default Backend HTTP Settings Collection.
- default
Backend stringHttp Settings Name The Name of the Default Backend HTTP Settings Collection which should be used for this URL Path Map. Cannot be set if
default_redirect_configuration_nameis set.- default
Redirect stringConfiguration Id The ID of the Default Redirect Configuration.
- default
Redirect stringConfiguration Name The Name of the Default Redirect Configuration which should be used for this URL Path Map. Cannot be set if either
default_backend_address_pool_nameordefault_backend_http_settings_nameis set.- default
Rewrite stringRule Set Id - default
Rewrite stringRule Set Name The Name of the Default Rewrite Rule Set which should be used for this URL Path Map. Only valid for v2 SKUs.
- id string
The ID of the Rewrite Rule Set
- name str
The Name of the URL Path Map.
- path
Rules List[ApplicationGateway Url Path Map Path Rule] One or more
path_ruleblocks as defined above.- default
Backend strAddress Pool Id The ID of the Default Backend Address Pool.
- default
Backend strAddress Pool Name The Name of the Default Backend Address Pool which should be used for this URL Path Map. Cannot be set if
default_redirect_configuration_nameis set.- default
Backend strHttp Settings Id The ID of the Default Backend HTTP Settings Collection.
- default
Backend strHttp Settings Name The Name of the Default Backend HTTP Settings Collection which should be used for this URL Path Map. Cannot be set if
default_redirect_configuration_nameis set.- default
Redirect strConfiguration Id The ID of the Default Redirect Configuration.
- default
Redirect strConfiguration Name The Name of the Default Redirect Configuration which should be used for this URL Path Map. Cannot be set if either
default_backend_address_pool_nameordefault_backend_http_settings_nameis set.- default
Rewrite strRule Set Id - default
Rewrite strRule Set Name The Name of the Default Rewrite Rule Set which should be used for this URL Path Map. Only valid for v2 SKUs.
- id str
The ID of the Rewrite Rule Set
ApplicationGatewayUrlPathMapPathRule
- Name string
The Name of the Path Rule.
- Paths List<string>
A list of Paths used in this Path Rule.
- Backend
Address stringPool Id The ID of the associated Backend Address Pool.
- Backend
Address stringPool Name The Name of the Backend Address Pool to use for this Path Rule. Cannot be set if
redirect_configuration_nameis set.- Backend
Http stringSettings Id The ID of the associated Backend HTTP Settings Configuration.
- Backend
Http stringSettings Name The Name of the Backend HTTP Settings Collection to use for this Path Rule. Cannot be set if
redirect_configuration_nameis set.- Id string
The ID of the Rewrite Rule Set
- Redirect
Configuration stringId The ID of the associated Redirect Configuration.
- Redirect
Configuration stringName The Name of a Redirect Configuration to use for this Path Rule. Cannot be set if
backend_address_pool_nameorbackend_http_settings_nameis set.- Rewrite
Rule stringSet Id The ID of the associated Rewrite Rule Set.
- Rewrite
Rule stringSet Name The Name of the Rewrite Rule Set which should be used for this URL Path Map. Only valid for v2 SKUs.
- Name string
The Name of the Path Rule.
- Paths []string
A list of Paths used in this Path Rule.
- Backend
Address stringPool Id The ID of the associated Backend Address Pool.
- Backend
Address stringPool Name The Name of the Backend Address Pool to use for this Path Rule. Cannot be set if
redirect_configuration_nameis set.- Backend
Http stringSettings Id The ID of the associated Backend HTTP Settings Configuration.
- Backend
Http stringSettings Name The Name of the Backend HTTP Settings Collection to use for this Path Rule. Cannot be set if
redirect_configuration_nameis set.- Id string
The ID of the Rewrite Rule Set
- Redirect
Configuration stringId The ID of the associated Redirect Configuration.
- Redirect
Configuration stringName The Name of a Redirect Configuration to use for this Path Rule. Cannot be set if
backend_address_pool_nameorbackend_http_settings_nameis set.- Rewrite
Rule stringSet Id The ID of the associated Rewrite Rule Set.
- Rewrite
Rule stringSet Name The Name of the Rewrite Rule Set which should be used for this URL Path Map. Only valid for v2 SKUs.
- name string
The Name of the Path Rule.
- paths string[]
A list of Paths used in this Path Rule.
- backend
Address stringPool Id The ID of the associated Backend Address Pool.
- backend
Address stringPool Name The Name of the Backend Address Pool to use for this Path Rule. Cannot be set if
redirect_configuration_nameis set.- backend
Http stringSettings Id The ID of the associated Backend HTTP Settings Configuration.
- backend
Http stringSettings Name The Name of the Backend HTTP Settings Collection to use for this Path Rule. Cannot be set if
redirect_configuration_nameis set.- id string
The ID of the Rewrite Rule Set
- redirect
Configuration stringId The ID of the associated Redirect Configuration.
- redirect
Configuration stringName The Name of a Redirect Configuration to use for this Path Rule. Cannot be set if
backend_address_pool_nameorbackend_http_settings_nameis set.- rewrite
Rule stringSet Id The ID of the associated Rewrite Rule Set.
- rewrite
Rule stringSet Name The Name of the Rewrite Rule Set which should be used for this URL Path Map. Only valid for v2 SKUs.
- name str
The Name of the Path Rule.
- paths List[str]
A list of Paths used in this Path Rule.
- backend
Address strPool Name The Name of the Backend Address Pool to use for this Path Rule. Cannot be set if
redirect_configuration_nameis set.- backend
Http strSettings Id The ID of the associated Backend HTTP Settings Configuration.
- backend
Http strSettings Name The Name of the Backend HTTP Settings Collection to use for this Path Rule. Cannot be set if
redirect_configuration_nameis set.- backend_
address_ strpool_ id The ID of the associated Backend Address Pool.
- id str
The ID of the Rewrite Rule Set
- redirect
Configuration strId The ID of the associated Redirect Configuration.
- redirect
Configuration strName The Name of a Redirect Configuration to use for this Path Rule. Cannot be set if
backend_address_pool_nameorbackend_http_settings_nameis set.- rewrite
Rule strSet Id The ID of the associated Rewrite Rule Set.
- rewrite
Rule strSet Name The Name of the Rewrite Rule Set which should be used for this URL Path Map. Only valid for v2 SKUs.
ApplicationGatewayWafConfiguration
- Enabled bool
Is the Web Application Firewall be enabled?
- Firewall
Mode string The Web Application Firewall Mode. Possible values are
DetectionandPrevention.- Rule
Set stringVersion The Version of the Rule Set used for this Web Application Firewall. Possible values are
2.2.9,3.0, and3.1.- Disabled
Rule List<ApplicationGroups Gateway Waf Configuration Disabled Rule Group Args> one or more
disabled_rule_groupblocks as defined below.- Exclusions
List<Application
Gateway Waf Configuration Exclusion Args> one or more
exclusionblocks as defined below.- File
Upload intLimit Mb The File Upload Limit in MB. Accepted values are in the range
1MB to500MB. Defaults to100MB.- Max
Request intBody Size Kb The Maximum Request Body Size in KB. Accepted values are in the range
1KB to128KB. Defaults to128KB.- Request
Body boolCheck Is Request Body Inspection enabled? Defaults to
true.- Rule
Set stringType The Type of the Rule Set used for this Web Application Firewall. Currently, only
OWASPis supported.
- Enabled bool
Is the Web Application Firewall be enabled?
- Firewall
Mode string The Web Application Firewall Mode. Possible values are
DetectionandPrevention.- Rule
Set stringVersion The Version of the Rule Set used for this Web Application Firewall. Possible values are
2.2.9,3.0, and3.1.- Disabled
Rule []ApplicationGroups Gateway Waf Configuration Disabled Rule Group one or more
disabled_rule_groupblocks as defined below.- Exclusions
[]Application
Gateway Waf Configuration Exclusion one or more
exclusionblocks as defined below.- File
Upload intLimit Mb The File Upload Limit in MB. Accepted values are in the range
1MB to500MB. Defaults to100MB.- Max
Request intBody Size Kb The Maximum Request Body Size in KB. Accepted values are in the range
1KB to128KB. Defaults to128KB.- Request
Body boolCheck Is Request Body Inspection enabled? Defaults to
true.- Rule
Set stringType The Type of the Rule Set used for this Web Application Firewall. Currently, only
OWASPis supported.
- enabled boolean
Is the Web Application Firewall be enabled?
- firewall
Mode string The Web Application Firewall Mode. Possible values are
DetectionandPrevention.- rule
Set stringVersion The Version of the Rule Set used for this Web Application Firewall. Possible values are
2.2.9,3.0, and3.1.- disabled
Rule ApplicationGroups Gateway Waf Configuration Disabled Rule Group[] one or more
disabled_rule_groupblocks as defined below.- exclusions
Application
Gateway Waf Configuration Exclusion[] one or more
exclusionblocks as defined below.- file
Upload numberLimit Mb The File Upload Limit in MB. Accepted values are in the range
1MB to500MB. Defaults to100MB.- max
Request numberBody Size Kb The Maximum Request Body Size in KB. Accepted values are in the range
1KB to128KB. Defaults to128KB.- request
Body booleanCheck Is Request Body Inspection enabled? Defaults to
true.- rule
Set stringType The Type of the Rule Set used for this Web Application Firewall. Currently, only
OWASPis supported.
- enabled bool
Is the Web Application Firewall be enabled?
- firewall
Mode str The Web Application Firewall Mode. Possible values are
DetectionandPrevention.- rule
Set strVersion The Version of the Rule Set used for this Web Application Firewall. Possible values are
2.2.9,3.0, and3.1.- disabled
Rule List[ApplicationGroups Gateway Waf Configuration Disabled Rule Group] one or more
disabled_rule_groupblocks as defined below.- exclusions
List[Application
Gateway Waf Configuration Exclusion] one or more
exclusionblocks as defined below.- file
Upload floatLimit Mb The File Upload Limit in MB. Accepted values are in the range
1MB to500MB. Defaults to100MB.- max
Request floatBody Size Kb The Maximum Request Body Size in KB. Accepted values are in the range
1KB to128KB. Defaults to128KB.- request
Body boolCheck Is Request Body Inspection enabled? Defaults to
true.- rule
Set strType The Type of the Rule Set used for this Web Application Firewall. Currently, only
OWASPis supported.
ApplicationGatewayWafConfigurationDisabledRuleGroup
- Rule
Group stringName The rule group where specific rules should be disabled. Accepted values are:
crs_20_protocol_violations,crs_21_protocol_anomalies,crs_23_request_limits,crs_30_http_policy,crs_35_bad_robots,crs_40_generic_attacks,crs_41_sql_injection_attacks,crs_41_xss_attacks,crs_42_tight_security,crs_45_trojans,General,REQUEST-911-METHOD-ENFORCEMENT,REQUEST-913-SCANNER-DETECTION,REQUEST-920-PROTOCOL-ENFORCEMENT,REQUEST-921-PROTOCOL-ATTACK,REQUEST-930-APPLICATION-ATTACK-LFI,REQUEST-931-APPLICATION-ATTACK-RFI,REQUEST-932-APPLICATION-ATTACK-RCE,REQUEST-933-APPLICATION-ATTACK-PHP,REQUEST-941-APPLICATION-ATTACK-XSS,REQUEST-942-APPLICATION-ATTACK-SQLI,REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION- Rules List<int>
A list of rules which should be disabled in that group. Disables all rules in the specified group if
rulesis not specified.
- Rule
Group stringName The rule group where specific rules should be disabled. Accepted values are:
crs_20_protocol_violations,crs_21_protocol_anomalies,crs_23_request_limits,crs_30_http_policy,crs_35_bad_robots,crs_40_generic_attacks,crs_41_sql_injection_attacks,crs_41_xss_attacks,crs_42_tight_security,crs_45_trojans,General,REQUEST-911-METHOD-ENFORCEMENT,REQUEST-913-SCANNER-DETECTION,REQUEST-920-PROTOCOL-ENFORCEMENT,REQUEST-921-PROTOCOL-ATTACK,REQUEST-930-APPLICATION-ATTACK-LFI,REQUEST-931-APPLICATION-ATTACK-RFI,REQUEST-932-APPLICATION-ATTACK-RCE,REQUEST-933-APPLICATION-ATTACK-PHP,REQUEST-941-APPLICATION-ATTACK-XSS,REQUEST-942-APPLICATION-ATTACK-SQLI,REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION- Rules []int
A list of rules which should be disabled in that group. Disables all rules in the specified group if
rulesis not specified.
- rule
Group stringName The rule group where specific rules should be disabled. Accepted values are:
crs_20_protocol_violations,crs_21_protocol_anomalies,crs_23_request_limits,crs_30_http_policy,crs_35_bad_robots,crs_40_generic_attacks,crs_41_sql_injection_attacks,crs_41_xss_attacks,crs_42_tight_security,crs_45_trojans,General,REQUEST-911-METHOD-ENFORCEMENT,REQUEST-913-SCANNER-DETECTION,REQUEST-920-PROTOCOL-ENFORCEMENT,REQUEST-921-PROTOCOL-ATTACK,REQUEST-930-APPLICATION-ATTACK-LFI,REQUEST-931-APPLICATION-ATTACK-RFI,REQUEST-932-APPLICATION-ATTACK-RCE,REQUEST-933-APPLICATION-ATTACK-PHP,REQUEST-941-APPLICATION-ATTACK-XSS,REQUEST-942-APPLICATION-ATTACK-SQLI,REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION- rules number[]
A list of rules which should be disabled in that group. Disables all rules in the specified group if
rulesis not specified.
- rule
Group strName The rule group where specific rules should be disabled. Accepted values are:
crs_20_protocol_violations,crs_21_protocol_anomalies,crs_23_request_limits,crs_30_http_policy,crs_35_bad_robots,crs_40_generic_attacks,crs_41_sql_injection_attacks,crs_41_xss_attacks,crs_42_tight_security,crs_45_trojans,General,REQUEST-911-METHOD-ENFORCEMENT,REQUEST-913-SCANNER-DETECTION,REQUEST-920-PROTOCOL-ENFORCEMENT,REQUEST-921-PROTOCOL-ATTACK,REQUEST-930-APPLICATION-ATTACK-LFI,REQUEST-931-APPLICATION-ATTACK-RFI,REQUEST-932-APPLICATION-ATTACK-RCE,REQUEST-933-APPLICATION-ATTACK-PHP,REQUEST-941-APPLICATION-ATTACK-XSS,REQUEST-942-APPLICATION-ATTACK-SQLI,REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION- rules List[Integer]
A list of rules which should be disabled in that group. Disables all rules in the specified group if
rulesis not specified.
ApplicationGatewayWafConfigurationExclusion
- Match
Variable string Match variable of the exclusion rule to exclude header, cookie or GET arguments. Possible values are
RequestHeaderNames,RequestArgNamesandRequestCookieNames- Selector string
String value which will be used for the filter operation. If empty will exclude all traffic on this
match_variable- Selector
Match stringOperator Operator which will be used to search in the variable content. Possible values are
Equals,StartsWith,EndsWith,Contains. If empty will exclude all traffic on thismatch_variable
- Match
Variable string Match variable of the exclusion rule to exclude header, cookie or GET arguments. Possible values are
RequestHeaderNames,RequestArgNamesandRequestCookieNames- Selector string
String value which will be used for the filter operation. If empty will exclude all traffic on this
match_variable- Selector
Match stringOperator Operator which will be used to search in the variable content. Possible values are
Equals,StartsWith,EndsWith,Contains. If empty will exclude all traffic on thismatch_variable
- match
Variable string Match variable of the exclusion rule to exclude header, cookie or GET arguments. Possible values are
RequestHeaderNames,RequestArgNamesandRequestCookieNames- selector string
String value which will be used for the filter operation. If empty will exclude all traffic on this
match_variable- selector
Match stringOperator Operator which will be used to search in the variable content. Possible values are
Equals,StartsWith,EndsWith,Contains. If empty will exclude all traffic on thismatch_variable
- match
Variable str Match variable of the exclusion rule to exclude header, cookie or GET arguments. Possible values are
RequestHeaderNames,RequestArgNamesandRequestCookieNames- selector str
String value which will be used for the filter operation. If empty will exclude all traffic on this
match_variable- selector
Match strOperator Operator which will be used to search in the variable content. Possible values are
Equals,StartsWith,EndsWith,Contains. If empty will exclude all traffic on thismatch_variable
Package Details
- Repository
- https://github.com/pulumi/pulumi-azure
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
azurermTerraform Provider.