issue_15-17

* new feature #16 #17
* fixes #15

Author: mikaEz

examples/main.tf

@@ -9,14 +9,39 @@ module "frontdoor" {
         Microsoft_BotManagerRuleSet = {
           type     = "Microsoft_BotManagerRuleSet"
           version  = "1.0"
-          override = []
+        }
+        Microsoft_DefaultRuleSet = {
+          type    = "Microsoft_DefaultRuleSet"
+          version = "1.1"
+          override = {
+            XSS = {
+              rule_group_name = "XSS"
+              rule = {
+                941220 = {
+                  rule_id = "941220"
+                }
+                941221 = {
+                  action  = "Log"
+                  enabled = true
+                  rule_id = "941221"
+                }
+              }
+            }
+            SQLI = {
+              rule_group_name = "SQLI"
+              exclusion = {
+                not_suspicious = {
+                  match_variable = "QueryStringArgNames"
+                  operator       = "Equals"
+                  selector       = "really_not_suspicious"
+                }
+              }
+            }
+          }
         }
       }
       custom_rule = {
-        ip_access = {
-          name     = "iprestriction"
-          action   = "Block"
-          enabled  = true
+        iprestriction = {
           priority = 0
           type     = "MatchRule"
           match_conditions = {
@@ -84,6 +109,7 @@ module "frontdoor" {
           forwarding_configuration = {
             backend_pool_name   = "kubernetes_cluster_controller"
             forwarding_protocol = "MatchRequest"
+            cache_enabled       = false
           }
         }
         kubernetes_cluster_controller = {
@@ -131,31 +157,32 @@ module "frontdoor" {
   }
   frontdoor_rules_engine = {
     derules = {
-      resource_group_name = "service-env-rg"
       frontdoor_name      = module.frontdoor.frontdoor.env.name
+      resource_group_name = "service-env-rg"
       routing_rule_name   = "kubernetes_cluster_controller non-backend"
-      rules = {
-        entire = {
+      rule = {
+        redirectde = {
           priority                  = "0"
-          match_processing_behavior = "Stop"
           action = {
             route_configuration_override = {
               custom_host       = "domain-de"
               custom_path       = "/"
-              redirect_protocol = "HttpsOnly"
               redirect_type     = "PermanentRedirect"
             }
           }
-          match_conditions = [
-            {
-              match_value      = ["domain-de domain-de/"]
-              match_variable   = "RequestUri"
-              operator         = "Equal"
-              negate_condition = false
-              selector         = ""
-              transforms       = []
+          match_condition = {
+            header = {
+              variable = "RequestHeader"
+              selector = "accept-language"
+              operator = "Contains"
+              value    = ["de"]
             }
-          ]
+            uri = {
+              variable = "RequestUri"
+              operator = "EndsWith"
+              value    = ["domain.com domain.com/"]
+            }
+          }
         }
       }
     }