Merge pull request #884 from asukumar22/patch-8

Added ARG query for A01.40 in network_appdelivery_checklist.en.json
Azure · Oct 23, 2024 · 3c3e529 · 3c3e529
2 parents 474b712 + 0ea43eb
commit 3c3e529
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/checklists/network_appdelivery_checklist.en.json b/checklists/network_appdelivery_checklist.en.json
@@ -221,7 +221,8 @@
             "id": "A01.40",
             "ammp": true,
             "severity": "High",
-            "link": "https://learn.microsoft.com/azure/web-application-firewall/ag/policy-overview?source=recommendations"
+            "graph": "resources | where type =~ 'microsoft.network/applicationgatewaywebapplicationfirewallpolicies' | extend compliant = (properties['policySettings']['mode'] =~ 'Prevention')| where properties['policySettings']['mode'] =~ 'Prevention' | distinct id, name, compliant",
+            "link": "https://learn.microsoft.com/azure/web-application-firewall/ag/policy-overview?source=recommendations"                                                                                                                                                                                                                            
         },
         {
             "category": "Network Topology and Connectivity",