Added AFD-5 and AFD-6 (#337)

Co-authored-by: Robert Lightner <[email protected]>
Azure · Apr 4, 2024 · 8888ad7 · 8888ad7
1 parent 1658a62
commit 8888ad7
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 2 deletions.
diff --git a/docs/content/services/networking/front-door/code/afd-5/afd-5.kql b/docs/content/services/networking/front-door/code/afd-5/afd-5.kql
@@ -1 +1,8 @@
-// under-development
+// Azure Resource Graph Query
+// Use end-to-end TLS
+cdnresources
+| where type == "microsoft.cdn/profiles/afdendpoints/routes"
+| extend forwardingProtocol=tostring(properties.forwardingProtocol),supportedProtocols=properties.supportedProtocols
+| project id,name,forwardingProtocol,supportedProtocols,tags
+| where forwardingProtocol !~ "httpsonly" or supportedProtocols has "http"
+| project recommendationId= "afd-5", name,id,tags,param1=strcat("forwardingProtocol:",forwardingProtocol),param2=strcat("supportedProtocols:",supportedProtocols)
diff --git a/docs/content/services/networking/front-door/code/afd-6/afd-6.kql b/docs/content/services/networking/front-door/code/afd-6/afd-6.kql
@@ -1 +1,8 @@
-// under-development
+// Azure Resource Graph Query
+// Use HTTP to HTTPS redirection
+cdnresources
+| where type == "microsoft.cdn/profiles/afdendpoints/routes"
+| extend httpsRedirect=tostring(properties.httpsRedirect)
+| project id,name,httpsRedirect,tags
+| where httpsRedirect !~ "enabled"
+| project recommendationId= "afd-6", name,id,tags,param1=strcat("httpsRedirect:",httpsRedirect)