From 0199c7437d5766b21a817c6c8c12b4fefe5b5b2d Mon Sep 17 00:00:00 2001 From: Sai Sujith Reddy Mankala Date: Wed, 29 Apr 2020 20:14:38 -0700 Subject: [PATCH] Revert https://github.com/Azure/azure-rest-api-specs/pull/9045 + Add TI Whitelist (#9271) * TI whitelisting for firewall policy * running prettier * fixing description * removing extra property from the response * adding the new property in examples * retrigger the pr check * clean up * Revert "Rename Firewall Policy child resource RuleGroup to RuleCollectionGroup (#9045)" This reverts commit b49caabeacecce6ddc7e357dd7d758bd9fd82dbc. --- .../examples/FirewallPolicyGet.json | 12 +- .../FirewallPolicyListByResourceGroup.json | 4 +- .../FirewallPolicyListBySubscription.json | 4 +- .../examples/FirewallPolicyPut.json | 38 ++- ...son => FirewallPolicyRuleGroupDelete.json} | 2 +- ...t.json => FirewallPolicyRuleGroupGet.json} | 18 +- ....json => FirewallPolicyRuleGroupList.json} | 18 +- ...t.json => FirewallPolicyRuleGroupPut.json} | 42 +-- ...rewallPolicyRuleGroupWithIpGroupsGet.json} | 14 +- ...ewallPolicyRuleGroupWithIpGroupsList.json} | 18 +- ...rewallPolicyRuleGroupWithIpGroupsPut.json} | 42 +-- .../stable/2020-04-01/firewallPolicy.json | 304 ++++++++++-------- 12 files changed, 286 insertions(+), 230 deletions(-) rename specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/{FirewallPolicyRuleCollectionGroupDelete.json => FirewallPolicyRuleGroupDelete.json} (80%) rename specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/{FirewallPolicyRuleCollectionGroupGet.json => FirewallPolicyRuleGroupGet.json} (68%) rename specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/{FirewallPolicyRuleCollectionGroupList.json => FirewallPolicyRuleGroupList.json} (70%) rename specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/{FirewallPolicyRuleCollectionGroupPut.json => FirewallPolicyRuleGroupPut.json} (70%) rename specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/{FirewallPolicyRuleCollectionGroupWithIpGroupsGet.json => FirewallPolicyRuleGroupWithIpGroupsGet.json} (79%) rename specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/{FirewallPolicyRuleCollectionGroupWithIpGroupsList.json => FirewallPolicyRuleGroupWithIpGroupsList.json} (72%) rename specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/{FirewallPolicyRuleCollectionGroupWithIpGroupsPut.json => FirewallPolicyRuleGroupWithIpGroupsPut.json} (74%) diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyGet.json b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyGet.json index e2698ffc55b0..3e875746a5a4 100644 --- a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyGet.json +++ b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyGet.json @@ -19,9 +19,17 @@ "properties": { "provisioningState": "Succeeded", "threatIntelMode": "Alert", - "ruleCollectionGroups": [ + "threatIntelWhitelist": { + "ipAddresses": [ + "20.3.4.5" + ], + "fqdns": [ + "*.microsoft.com" + ] + }, + "ruleGroups": [ { - "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleCollectionGroups/ruleCollectionGroup1" + "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleGroups/ruleGroup1" } ], "firewalls": [] diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyListByResourceGroup.json b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyListByResourceGroup.json index b32ddff27384..2e88afffbc7e 100644 --- a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyListByResourceGroup.json +++ b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyListByResourceGroup.json @@ -20,9 +20,9 @@ "properties": { "provisioningState": "Succeeded", "threatIntelMode": "Alert", - "ruleCollectionGroups": [ + "ruleGroups": [ { - "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleCollectionGroups/ruleCollectionGroup1" + "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleGroups/ruleGroup1" } ], "firewalls": [] diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyListBySubscription.json b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyListBySubscription.json index 60fa317dacd1..029a12c66d91 100644 --- a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyListBySubscription.json +++ b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyListBySubscription.json @@ -19,9 +19,9 @@ "properties": { "provisioningState": "Succeeded", "threatIntelMode": "Alert", - "ruleCollectionGroups": [ + "ruleGroups": [ { - "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleCollectionGroups/ruleCollectionGroup1" + "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleGroups/ruleGroup1" } ], "firewalls": [] diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyPut.json b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyPut.json index 516e4f0c3860..2bd4cd7764cd 100644 --- a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyPut.json +++ b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyPut.json @@ -10,7 +10,15 @@ }, "location": "West US", "properties": { - "threatIntelMode": "Alert" + "threatIntelMode": "Alert", + "threatIntelWhitelist": { + "ipAddresses": [ + "20.3.4.5" + ], + "fqdns": [ + "*.microsoft.com" + ] + } } } }, @@ -28,12 +36,20 @@ "properties": { "provisioningState": "Succeeded", "threatIntelMode": "Alert", - "ruleCollectionGroups": [ + "threatIntelWhitelist": { + "ipAddresses": [ + "20.3.4.5" + ], + "fqdns": [ + "*.microsoft.com" + ] + }, + "ruleGroups": [ { - "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleCollectionGroups/ruleCollectionGroup1" + "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleGroups/rulegroup1" }, { - "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleCollectionGroups/ruleCollectionGroup2" + "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleGroups/rulegroup2" } ], "firewalls": [] @@ -53,12 +69,20 @@ "properties": { "provisioningState": "Succeeded", "threatIntelMode": "Alert", - "ruleCollectionGroups": [ + "threatIntelWhitelist": { + "ipAddresses": [ + "20.3.4.5" + ], + "fqdns": [ + "*.microsoft.com" + ] + }, + "ruleGroups": [ { - "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleCollectionGroups/ruleCollectionGroup1" + "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleGroups/ruleGroup1" }, { - "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleCollectionGroups/ruleCollectionGroup2" + "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleGroups/rulegroup2" } ], "firewalls": [] diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupDelete.json b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupDelete.json similarity index 80% rename from specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupDelete.json rename to specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupDelete.json index f7c817358ced..bb6ea2861c79 100644 --- a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupDelete.json +++ b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupDelete.json @@ -1,6 +1,6 @@ { "parameters": { - "ruleCollectionGroupName": "ruleCollectionGroup1", + "ruleGroupName": "ruleGroup1", "firewallPolicyName": "firewallPolicy", "resourceGroupName": "rg1", "api-version": "2020-04-01", diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupGet.json b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupGet.json similarity index 68% rename from specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupGet.json rename to specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupGet.json index 641fcb0d40e6..20ff78afa014 100644 --- a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupGet.json +++ b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupGet.json @@ -1,6 +1,6 @@ { "parameters": { - "ruleCollectionGroupName": "ruleCollectionGroup1", + "ruleGroupName": "ruleGroup1", "firewallPolicyName": "firewallPolicy", "resourceGroupName": "rg1", "api-version": "2020-04-01", @@ -9,24 +9,24 @@ "responses": { "200": { "body": { - "name": "ruleCollectionGroup1", - "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleCollectionGroups/ruleCollectionGroup1", + "name": "ruleGroup1", + "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleGroups/ruleGroup1", "etag": "W/\"72090554-7e3b-43f2-80ad-99a9020dcb11\"", "properties": { "provisioningState": "Succeeded", "priority": 110, - "ruleCollections": [ + "rules": [ { - "ruleCollectionType": "FirewallPolicyFilterRuleCollection", - "name": "Example-Filter-Rule-Collection", + "ruleType": "FirewallPolicyFilterRule", + "name": "Example-Filter-Rule", "priority": 200, "action": { "type": "Deny" }, - "rules": [ + "ruleConditions": [ { - "ruleType": "NetworkRule", - "name": "network-rule1", + "ruleConditionType": "NetworkRuleCondition", + "name": "network-condition1", "sourceAddresses": [ "10.1.25.0/24" ], diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupList.json b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupList.json similarity index 70% rename from specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupList.json rename to specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupList.json index 297c0caec9b7..77387a16a419 100644 --- a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupList.json +++ b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupList.json @@ -10,25 +10,25 @@ "body": { "value": [ { - "name": "ruleCollectionGroup1", - "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleCollectionGroups/ruleCollectionGroup1", + "name": "ruleGroup1", + "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleGroups/ruleGroup1", "etag": "W/\"72090554-7e3b-43f2-80ad-99a9020dcb11\"", "properties": { "provisioningState": "Succeeded", "priority": 110, - "ruleCollections": [ + "rules": [ { - "name": "Example-Filter-Rule-Collection", - "ruleCollectionType": "FirewallPolicyFilterRuleCollection", + "name": "Example-Filter-Rule", + "ruleType": "FirewallPolicyFilterRule", "priority": 120, "action": { "type": "Deny" }, - "rules": [ + "ruleConditions": [ { - "name": "network-rule-1", - "ruleType": "NetworkRule", - "description": "Network rule", + "name": "network-condition-1", + "ruleConditionType": "NetworkRuleCondition", + "description": "Network rule condition", "destinationAddresses": [ "*" ], diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupPut.json b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupPut.json similarity index 70% rename from specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupPut.json rename to specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupPut.json index 4727483aec80..80255afbeb05 100644 --- a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupPut.json +++ b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupPut.json @@ -4,21 +4,21 @@ "subscriptionId": "subid", "resourceGroupName": "rg1", "firewallPolicyName": "firewallPolicy", - "ruleCollectionGroupName": "ruleCollectionGroup1", + "ruleGroupName": "ruleGroup1", "parameters": { "properties": { "priority": 110, - "ruleCollections": [ + "rules": [ { - "ruleCollectionType": "FirewallPolicyFilterRuleCollection", - "name": "Example-Filter-Rule-Collection", + "ruleType": "FirewallPolicyFilterRule", + "name": "Example-Filter-Rule", "action": { "type": "Deny" }, - "rules": [ + "ruleConditions": [ { - "ruleType": "NetworkRule", - "name": "network-rule1", + "ruleConditionType": "NetworkRuleCondition", + "name": "network-condition1", "sourceAddresses": [ "10.1.25.0/24" ], @@ -41,23 +41,23 @@ "responses": { "200": { "body": { - "name": "ruleCollectionGroup1", - "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleCollectionGroups/ruleCollectionGroup1", + "name": "ruleGroup1", + "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleGroups/ruleGroup1", "etag": "w/\\00000000-0000-0000-0000-000000000000\\", "properties": { "provisioningState": "Succeeded", "priority": 110, - "ruleCollections": [ + "rules": [ { - "ruleCollectionType": "FirewallPolicyFilterRuleCollection", - "name": "Example-Filter-Rule-Collection", + "ruleType": "FirewallPolicyFilterRule", + "name": "Example-Filter-Rule", "action": { "type": "Deny" }, - "rules": [ + "ruleConditions": [ { - "ruleType": "NetworkRule", - "name": "network-rule1", + "ruleConditionType": "NetworkRuleCondition", + "name": "network-condition1", "sourceAddresses": [ "10.1.25.0/24" ], @@ -85,17 +85,17 @@ "properties": { "provisioningState": "Succeeded", "priority": 110, - "ruleCollections": [ + "rules": [ { - "ruleCollectionType": "FirewallPolicyFilterRuleCollection", - "name": "Example-Filter-Rule-Collection", + "ruleType": "FirewallPolicyFilterRule", + "name": "Example-Filter-Rule", "action": { "type": "Deny" }, - "rules": [ + "ruleConditions": [ { - "ruleType": "NetworkRule", - "name": "network-rule1", + "ruleConditionType": "NetworkRuleCondition", + "name": "network-condition1", "sourceAddresses": [ "10.1.25.0/24" ], diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupWithIpGroupsGet.json b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupWithIpGroupsGet.json similarity index 79% rename from specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupWithIpGroupsGet.json rename to specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupWithIpGroupsGet.json index bf1af7d5fa48..804922700943 100644 --- a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupWithIpGroupsGet.json +++ b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupWithIpGroupsGet.json @@ -1,6 +1,6 @@ { "parameters": { - "ruleCollectionGroupName": "ruleGroup1", + "ruleGroupName": "ruleGroup1", "firewallPolicyName": "firewallPolicy", "resourceGroupName": "rg1", "api-version": "2020-04-01", @@ -15,18 +15,18 @@ "properties": { "provisioningState": "Succeeded", "priority": 110, - "ruleCollections": [ + "rules": [ { - "ruleCollectionType": "FirewallPolicyFilterRuleCollection", - "name": "Example-Filter-Rule-Collection", + "ruleType": "FirewallPolicyFilterRule", + "name": "Example-Filter-Rule", "priority": 200, "action": { "type": "Deny" }, - "rules": [ + "ruleConditions": [ { - "ruleType": "NetworkRule", - "name": "network-rule1", + "ruleConditionType": "NetworkRuleCondition", + "name": "network-condition1", "ipProtocols": [ "TCP" ], diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupWithIpGroupsList.json b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupWithIpGroupsList.json similarity index 72% rename from specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupWithIpGroupsList.json rename to specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupWithIpGroupsList.json index a01864a7b8a7..37ab5e2c100f 100644 --- a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupWithIpGroupsList.json +++ b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupWithIpGroupsList.json @@ -10,25 +10,25 @@ "body": { "value": [ { - "name": "ruleCollectionGroup1", - "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleCollectionGroups/ruleCollectionGroup1", + "name": "ruleGroup1", + "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleGroups/ruleGroup1", "etag": "W/\"72090554-7e3b-43f2-80ad-99a9020dcb11\"", "properties": { "provisioningState": "Succeeded", "priority": 110, - "ruleCollections": [ + "rules": [ { - "name": "Example-Filter-Rule-Collection", - "ruleCollectionType": "FirewallPolicyFilterRuleCollection", + "name": "Example-Filter-Rule", + "ruleType": "FirewallPolicyFilterRule", "priority": 120, "action": { "type": "Deny" }, - "rules": [ + "ruleConditions": [ { - "name": "network-rule-1", - "ruleType": "NetworkRule", - "description": "Network rule", + "name": "network-condition-1", + "ruleConditionType": "NetworkRuleCondition", + "description": "Network rule condition", "sourceIpGroups": [ "/subscriptions/subid/providers/Microsoft.Network/resourceGroup/rg1/ipGroups/ipGroups1" ], diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupWithIpGroupsPut.json b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupWithIpGroupsPut.json similarity index 74% rename from specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupWithIpGroupsPut.json rename to specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupWithIpGroupsPut.json index 147aa03eddb3..0b0bc9744e71 100644 --- a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleCollectionGroupWithIpGroupsPut.json +++ b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/examples/FirewallPolicyRuleGroupWithIpGroupsPut.json @@ -4,21 +4,21 @@ "subscriptionId": "subid", "resourceGroupName": "rg1", "firewallPolicyName": "firewallPolicy", - "ruleCollectionGroupName": "ruleCollectionGroup1", + "ruleGroupName": "ruleGroup1", "parameters": { "properties": { "priority": 110, - "ruleCollections": [ + "rules": [ { - "ruleCollectionType": "FirewallPolicyFilterRuleCollection", - "name": "Example-Filter-Rule-Collection", + "ruleType": "FirewallPolicyFilterRule", + "name": "Example-Filter-Rule", "action": { "type": "Deny" }, - "rules": [ + "ruleConditions": [ { - "ruleType": "NetworkRule", - "name": "network-1", + "ruleConditionType": "NetworkRuleCondition", + "name": "network-condition1", "ipProtocols": [ "TCP" ], @@ -41,23 +41,23 @@ "responses": { "200": { "body": { - "name": "ruleCollectionGroup1", - "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleCollectionGroups/ruleCollectionGroup1", + "name": "ruleGroup1", + "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleGroups/ruleGroup1", "etag": "w/\\00000000-0000-0000-0000-000000000000\\", "properties": { "provisioningState": "Succeeded", "priority": 110, - "ruleCollections": [ + "rules": [ { - "ruleCollectionType": "FirewallPolicyFilterRuleCollection", - "name": "Example-Filter-Rule-Collection", + "ruleType": "FirewallPolicyFilterRule", + "name": "Example-Filter-Rule", "action": { "type": "Deny" }, - "rules": [ + "ruleConditions": [ { - "ruleType": "NetworkRule", - "name": "network-1", + "ruleConditionType": "NetworkRuleCondition", + "name": "network-condition1", "ipProtocols": [ "TCP" ], @@ -85,17 +85,17 @@ "properties": { "provisioningState": "Succeeded", "priority": 110, - "ruleCollections": [ + "rules": [ { - "ruleCollectionType": "FirewallPolicyFilterRuleCollection", - "name": "Example-Filter-Rule-Collection", + "ruleType": "FirewallPolicyFilterRule", + "name": "Example-Filter-Rule", "action": { "type": "Deny" }, - "rules": [ + "ruleConditions": [ { - "ruleType": "NetworkRule", - "name": "network-1", + "ruleConditionType": "NetworkRuleCondition", + "name": "network-condition1", "ipProtocols": [ "TCP" ], diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/firewallPolicy.json b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/firewallPolicy.json index 2d58fc8e2b3b..33f79975a306 100644 --- a/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/firewallPolicy.json +++ b/specification/network/resource-manager/Microsoft.Network/stable/2020-04-01/firewallPolicy.json @@ -298,13 +298,13 @@ } } }, - "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/firewallPolicies/{firewallPolicyName}/ruleCollectionGroups/{ruleCollectionGroupName}": { + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/firewallPolicies/{firewallPolicyName}/ruleGroups/{ruleGroupName}": { "delete": { "tags": [ - "FirewallPolicyRuleCollectionGroups" + "FirewallPolicyRuleGroups" ], - "operationId": "FirewallPolicyRuleCollectionGroups_Delete", - "description": "Deletes the specified FirewallPolicyRuleCollectionGroup.", + "operationId": "FirewallPolicyRuleGroups_Delete", + "description": "Deletes the specified FirewallPolicyRuleGroup.", "parameters": [ { "name": "resourceGroupName", @@ -321,11 +321,11 @@ "description": "The name of the Firewall Policy." }, { - "name": "ruleCollectionGroupName", + "name": "ruleGroupName", "in": "path", "required": true, "type": "string", - "description": "The name of the FirewallPolicyRuleCollectionGroup." + "description": "The name of the FirewallPolicyRuleGroup." }, { "$ref": "./network.json#/parameters/ApiVersionParameter" @@ -352,8 +352,8 @@ } }, "x-ms-examples": { - "Delete FirewallPolicyRuleCollectionGroup": { - "$ref": "./examples/FirewallPolicyRuleCollectionGroupDelete.json" + "Delete FirewallPolicyRuleGroup": { + "$ref": "./examples/FirewallPolicyRuleGroupDelete.json" } }, "x-ms-long-running-operation": true, @@ -363,10 +363,10 @@ }, "get": { "tags": [ - "FirewallPolicyRuleCollectionGroups" + "FirewallPolicyRuleGroups" ], - "operationId": "FirewallPolicyRuleCollectionGroups_Get", - "description": "Gets the specified FirewallPolicyRuleCollectionGroup.", + "operationId": "FirewallPolicyRuleGroups_Get", + "description": "Gets the specified FirewallPolicyRuleGroup.", "parameters": [ { "name": "resourceGroupName", @@ -383,11 +383,11 @@ "description": "The name of the Firewall Policy." }, { - "name": "ruleCollectionGroupName", + "name": "ruleGroupName", "in": "path", "required": true, "type": "string", - "description": "The name of the FirewallPolicyRuleCollectionGroup." + "description": "The name of the FirewallPolicyRuleGroup." }, { "$ref": "./network.json#/parameters/ApiVersionParameter" @@ -398,9 +398,9 @@ ], "responses": { "200": { - "description": "Request successful. The operation returns a FirewallPolicyRuleCollectionGroup resource.", + "description": "Request successful. The operation returns a FirewallPolicyRuleGroup resource.", "schema": { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroup" + "$ref": "#/definitions/FirewallPolicyRuleGroup" } }, "default": { @@ -411,20 +411,20 @@ } }, "x-ms-examples": { - "Get FirewallPolicyRuleCollectionGroup": { - "$ref": "./examples/FirewallPolicyRuleCollectionGroupGet.json" + "Get FirewallPolicyRuleGroup": { + "$ref": "./examples/FirewallPolicyRuleGroupGet.json" }, - "Get FirewallPolicyRuleCollectionGroup With IpGroups": { - "$ref": "./examples/FirewallPolicyRuleCollectionGroupWithIpGroupsGet.json" + "Get FirewallPolicyRuleGroup With IpGroups": { + "$ref": "./examples/FirewallPolicyRuleGroupWithIpGroupsGet.json" } } }, "put": { "tags": [ - "FirewallPolicyRuleCollectionGroups" + "FirewallPolicyRuleGroups" ], - "operationId": "FirewallPolicyRuleCollectionGroups_CreateOrUpdate", - "description": "Creates or updates the specified FirewallPolicyRuleCollectionGroup.", + "operationId": "FirewallPolicyRuleGroups_CreateOrUpdate", + "description": "Creates or updates the specified FirewallPolicyRuleGroup.", "parameters": [ { "name": "resourceGroupName", @@ -441,20 +441,20 @@ "description": "The name of the Firewall Policy." }, { - "name": "ruleCollectionGroupName", + "name": "ruleGroupName", "in": "path", "required": true, "type": "string", - "description": "The name of the FirewallPolicyRuleCollectionGroup." + "description": "The name of the FirewallPolicyRuleGroup." }, { "name": "parameters", "in": "body", "required": true, "schema": { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroup" + "$ref": "#/definitions/FirewallPolicyRuleGroup" }, - "description": "Parameters supplied to the create or update FirewallPolicyRuleCollectionGroup operation." + "description": "Parameters supplied to the create or update FirewallPolicyRuleGroup operation." }, { "$ref": "./network.json#/parameters/ApiVersionParameter" @@ -465,15 +465,15 @@ ], "responses": { "201": { - "description": "Request received successfully. The operation returns the resulting FirewallPolicyRuleCollectionGroup resource.", + "description": "Request received successfully. The operation returns the resulting FirewallPolicyRuleGroup resource.", "schema": { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroup" + "$ref": "#/definitions/FirewallPolicyRuleGroup" } }, "200": { - "description": "Request successful. The operation returns the resulting FirewallPolicyRuleCollectionGroup resource.", + "description": "Request successful. The operation returns the resulting FirewallPolicyRuleGroup resource.", "schema": { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroup" + "$ref": "#/definitions/FirewallPolicyRuleGroup" } }, "default": { @@ -484,11 +484,11 @@ } }, "x-ms-examples": { - "Create FirewallPolicyRuleCollectionGroup": { - "$ref": "./examples/FirewallPolicyRuleCollectionGroupPut.json" + "Create FirewallPolicyRuleGroup": { + "$ref": "./examples/FirewallPolicyRuleGroupPut.json" }, - "Create FirewallPolicyRuleCollectionGroup With IpGroups": { - "$ref": "./examples/FirewallPolicyRuleCollectionGroupWithIpGroupsPut.json" + "Create FirewallPolicyRuleGroup With IpGroups": { + "$ref": "./examples/FirewallPolicyRuleGroupWithIpGroupsPut.json" } }, "x-ms-long-running-operation": true, @@ -497,13 +497,13 @@ } } }, - "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/firewallPolicies/{firewallPolicyName}/ruleCollectionGroups": { + "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/firewallPolicies/{firewallPolicyName}/ruleGroups": { "get": { "tags": [ - "FirewallPolicyRuleCollectionGroups" + "FirewallPolicyRuleGroups" ], - "operationId": "FirewallPolicyRuleCollectionGroups_List", - "description": "Lists all FirewallPolicyRuleCollectionGroups in a FirewallPolicy resource.", + "operationId": "FirewallPolicyRuleGroups_List", + "description": "Lists all FirewallPolicyRuleGroups in a FirewallPolicy resource.", "parameters": [ { "name": "resourceGroupName", @@ -528,9 +528,9 @@ ], "responses": { "200": { - "description": "Success. The operation returns a list of FirewallPolicyRuleCollectionGroup resources.", + "description": "Success. The operation returns a list of FirewallPolicyRuleGroup resources.", "schema": { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupListResult" + "$ref": "#/definitions/FirewallPolicyRuleGroupListResult" } }, "default": { @@ -541,11 +541,11 @@ } }, "x-ms-examples": { - "List all FirewallPolicyRuleCollectionGroups for a given FirewallPolicy": { - "$ref": "./examples/FirewallPolicyRuleCollectionGroupList.json" + "List all FirewallPolicyRuleGroups for a given FirewallPolicy": { + "$ref": "./examples/FirewallPolicyRuleGroupList.json" }, - "List all FirewallPolicyRuleCollectionGroups with IpGroups for a given FirewallPolicy": { - "$ref": "./examples/FirewallPolicyRuleCollectionGroupWithIpGroupsList.json" + "List all FirewallPolicyRuleGroups with IpGroups for a given FirewallPolicy": { + "$ref": "./examples/FirewallPolicyRuleGroupWithIpGroupsList.json" } }, "x-ms-pageable": { @@ -577,10 +577,10 @@ }, "FirewallPolicyPropertiesFormat": { "properties": { - "ruleCollectionGroups": { + "ruleGroups": { "type": "array", "readOnly": true, - "description": "List of references to FirewallPolicyRuleCollectionGroups.", + "description": "List of references to FirewallPolicyRuleGroups.", "items": { "$ref": "./network.json#/definitions/SubResource" } @@ -615,6 +615,10 @@ "description": "The operation mode for Threat Intelligence.", "$ref": "./azureFirewall.json#/definitions/AzureFirewallThreatIntelMode" }, + "threatIntelWhitelist": { + "description": "ThreatIntel Whitelist for Firewall Policy.", + "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" + }, "intrusionSystemMode": { "description": "The operation mode for Intrusion system.", "$ref": "#/definitions/FirewallPolicyIntrusionSystemMode" @@ -622,12 +626,12 @@ }, "description": "Firewall Policy definition." }, - "FirewallPolicyRuleCollectionGroup": { + "FirewallPolicyRuleGroup": { "properties": { "properties": { "x-ms-client-flatten": true, - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties", - "description": "The properties of the firewall policy rule collection group." + "$ref": "#/definitions/FirewallPolicyRuleGroupProperties", + "description": "The properties of the firewall policy rule group." }, "name": { "type": "string", @@ -649,9 +653,9 @@ "$ref": "./network.json#/definitions/SubResource" } ], - "description": "Rule Collection Group resource." + "description": "Rule Group resource." }, - "FirewallPolicyRuleCollectionGroupProperties": { + "FirewallPolicyRuleGroupProperties": { "properties": { "priority": { "type": "integer", @@ -660,45 +664,45 @@ "exclusiveMaximum": false, "minimum": 100, "exclusiveMinimum": false, - "description": "Priority of the Firewall Policy Rule Collection Group resource." + "description": "Priority of the Firewall Policy Rule Group resource." }, - "ruleCollections": { + "rules": { "type": "array", "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" + "$ref": "#/definitions/FirewallPolicyRule" }, - "description": "Group of Firewall Policy rule collections." + "description": "Group of Firewall Policy rules." }, "provisioningState": { "readOnly": true, "$ref": "./network.json#/definitions/ProvisioningState", - "description": "The provisioning state of the firewall policy rule collection group resource." + "description": "The provisioning state of the firewall policy rule group resource." } }, - "description": "Properties of the rule collection group." + "description": "Properties of the rule group." }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "discriminator": "ruleCollectionType", + "FirewallPolicyRule": { + "description": "Properties of the rule.", + "discriminator": "ruleType", "required": [ - "ruleCollectionType" + "ruleType" ], "properties": { - "ruleCollectionType": { + "ruleType": { "type": "string", - "description": "The type of the rule collection.", + "description": "The type of the rule.", "enum": [ - "FirewallPolicyNatRuleCollection", - "FirewallPolicyFilterRuleCollection" + "FirewallPolicyNatRule", + "FirewallPolicyFilterRule" ], "x-ms-enum": { - "name": "FirewallPolicyRuleCollectionType", + "name": "FirewallPolicyRuleType", "modelAsString": true } }, "name": { "type": "string", - "description": "The name of the rule collection." + "description": "The name of the rule." }, "priority": { "type": "integer", @@ -707,94 +711,94 @@ "exclusiveMaximum": false, "minimum": 100, "exclusiveMinimum": false, - "description": "Priority of the Firewall Policy Rule Collection resource." + "description": "Priority of the Firewall Policy Rule resource." } } }, - "FirewallPolicyNatRuleCollection": { + "FirewallPolicyNatRule": { "properties": { "action": { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction", - "description": "The action type of a Nat rule collection." + "$ref": "#/definitions/FirewallPolicyNatRuleAction", + "description": "The action type of a Nat rule." }, "translatedAddress": { "type": "string", - "description": "The translated address for this NAT rule collection." + "description": "The translated address for this NAT rule." }, "translatedPort": { "type": "string", - "description": "The translated port for this NAT rule collection." + "description": "The translated port for this NAT rule." }, - "rule": { - "$ref": "#/definitions/FirewallPolicyRule", - "description": "The match rule for incoming traffic." + "ruleCondition": { + "$ref": "#/definitions/FirewallPolicyRuleCondition", + "description": "The match conditions for incoming traffic." } }, "allOf": [ { - "$ref": "#/definitions/FirewallPolicyRuleCollection" + "$ref": "#/definitions/FirewallPolicyRule" } ], - "x-ms-discriminator-value": "FirewallPolicyNatRuleCollection", - "description": "Firewall Policy NAT Rule Collection." + "x-ms-discriminator-value": "FirewallPolicyNatRule", + "description": "Firewall Policy NAT Rule." }, - "FirewallPolicyFilterRuleCollection": { + "FirewallPolicyFilterRule": { "properties": { "action": { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction", - "description": "The action type of a Filter rule collection." + "$ref": "#/definitions/FirewallPolicyFilterRuleAction", + "description": "The action type of a Filter rule." }, - "rules": { + "ruleConditions": { "type": "array", "items": { - "$ref": "#/definitions/FirewallPolicyRule" + "$ref": "#/definitions/FirewallPolicyRuleCondition" }, - "description": "List of rules included in a rule collection." + "description": "Collection of rule conditions used by a rule." } }, "allOf": [ { - "$ref": "#/definitions/FirewallPolicyRuleCollection" + "$ref": "#/definitions/FirewallPolicyRule" } ], - "x-ms-discriminator-value": "FirewallPolicyFilterRuleCollection", - "description": "Firewall Policy Filter Rule Collection." + "x-ms-discriminator-value": "FirewallPolicyFilterRule", + "description": "Firewall Policy Filter Rule." }, - "FirewallPolicyRule": { + "FirewallPolicyRuleCondition": { "description": "Properties of a rule.", - "discriminator": "ruleType", + "discriminator": "ruleConditionType", "required": [ - "ruleType" + "ruleConditionType" ], "properties": { "name": { "type": "string", - "description": "Name of the rule." + "description": "Name of the rule condition." }, "description": { "type": "string", - "description": "Description of the rule." + "description": "Description of the rule condition." }, - "ruleType": { + "ruleConditionType": { "type": "string", - "description": "Rule Type.", + "description": "Rule Condition Type.", "enum": [ - "ApplicationRule", - "NetworkRule", - "NatRule" + "ApplicationRuleCondition", + "NetworkRuleCondition", + "NatRuleCondition" ], "x-ms-enum": { - "name": "FirewallPolicyRuleType", + "name": "FirewallPolicyRuleConditionType", "modelAsString": true } } } }, - "ApplicationRule": { - "x-ms-discriminator-value": "ApplicationRule", + "ApplicationRuleCondition": { + "x-ms-discriminator-value": "ApplicationRuleCondition", "allOf": [ { - "$ref": "#/definitions/FirewallPolicyRule" + "$ref": "#/definitions/FirewallPolicyRuleCondition" } ], "properties": { @@ -815,20 +819,20 @@ "protocols": { "type": "array", "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" + "$ref": "#/definitions/FirewallPolicyRuleConditionApplicationProtocol" }, "description": "Array of Application Protocols." }, "targetFqdns": { "type": "array", - "description": "List of FQDNs for this rule.", + "description": "List of FQDNs for this rule condition.", "items": { "type": "string" } }, "fqdnTags": { "type": "array", - "description": "List of FQDN Tags for this rule.", + "description": "List of FQDN Tags for this rule condition.", "items": { "type": "string" } @@ -841,23 +845,23 @@ } } }, - "description": "Rule of type application." + "description": "Rule condition of type application." }, - "NatRule": { - "description": "Rule of type nat.", - "x-ms-discriminator-value": "NatRule", + "NatRuleCondition": { + "description": "Rule condition of type nat.", + "x-ms-discriminator-value": "NatRuleCondition", "allOf": [ { - "$ref": "#/definitions/FirewallPolicyRule" + "$ref": "#/definitions/FirewallPolicyRuleCondition" } ], "properties": { "ipProtocols": { "type": "array", "items": { - "$ref": "#/definitions/FirewallPolicyRuleNetworkProtocol" + "$ref": "#/definitions/FirewallPolicyRuleConditionNetworkProtocol" }, - "description": "Array of FirewallPolicyRuleNetworkProtocols." + "description": "Array of FirewallPolicyRuleConditionNetworkProtocols." }, "sourceAddresses": { "type": "array", @@ -889,21 +893,21 @@ } } }, - "NetworkRule": { - "description": "Rule of type network.", - "x-ms-discriminator-value": "NetworkRule", + "NetworkRuleCondition": { + "description": "Rule condition of type network.", + "x-ms-discriminator-value": "NetworkRuleCondition", "allOf": [ { - "$ref": "#/definitions/FirewallPolicyRule" + "$ref": "#/definitions/FirewallPolicyRuleCondition" } ], "properties": { "ipProtocols": { "type": "array", "items": { - "$ref": "#/definitions/FirewallPolicyRuleNetworkProtocol" + "$ref": "#/definitions/FirewallPolicyRuleConditionNetworkProtocol" }, - "description": "Array of FirewallPolicyRuleNetworkProtocols." + "description": "Array of FirewallPolicyRuleConditionNetworkProtocols." }, "sourceAddresses": { "type": "array", @@ -942,11 +946,11 @@ } } }, - "FirewallPolicyRuleApplicationProtocol": { + "FirewallPolicyRuleConditionApplicationProtocol": { "properties": { "protocolType": { "description": "Protocol type.", - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocolType" + "$ref": "#/definitions/FirewallPolicyRuleConditionApplicationProtocolType" }, "port": { "type": "integer", @@ -960,39 +964,39 @@ }, "description": "Properties of the application rule protocol." }, - "FirewallPolicyRuleApplicationProtocolType": { + "FirewallPolicyRuleConditionApplicationProtocolType": { "type": "string", - "description": "The application protocol type of a Rule.", + "description": "The application protocol type of a Rule condition.", "enum": [ "Http", "Https" ], "x-ms-enum": { - "name": "FirewallPolicyRuleApplicationProtocolType", + "name": "FirewallPolicyRuleConditionApplicationProtocolType", "modelAsString": true } }, - "FirewallPolicyNatRuleCollectionActionType": { + "FirewallPolicyNatRuleActionType": { "type": "string", "description": "The action type of a rule.", "enum": [ "DNAT" ], "x-ms-enum": { - "name": "FirewallPolicyNatRuleCollectionActionType", + "name": "FirewallPolicyNatRuleActionType", "modelAsString": true } }, - "FirewallPolicyNatRuleCollectionAction": { + "FirewallPolicyNatRuleAction": { "properties": { "type": { "description": "The type of action.", - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionActionType" + "$ref": "#/definitions/FirewallPolicyNatRuleActionType" } }, - "description": "Properties of the FirewallPolicyNatRuleCollectionAction." + "description": "Properties of the FirewallPolicyNatRuleAction." }, - "FirewallPolicyFilterRuleCollectionActionType": { + "FirewallPolicyFilterRuleActionType": { "type": "string", "description": "The action type of a rule.", "enum": [ @@ -1000,22 +1004,22 @@ "Deny" ], "x-ms-enum": { - "name": "FirewallPolicyFilterRuleCollectionActionType", + "name": "FirewallPolicyFilterRuleActionType", "modelAsString": true } }, - "FirewallPolicyFilterRuleCollectionAction": { + "FirewallPolicyFilterRuleAction": { "properties": { "type": { "description": "The type of action.", - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionActionType" + "$ref": "#/definitions/FirewallPolicyFilterRuleActionType" } }, - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction." + "description": "Properties of the FirewallPolicyFilterRuleAction." }, - "FirewallPolicyRuleNetworkProtocol": { + "FirewallPolicyRuleConditionNetworkProtocol": { "type": "string", - "description": "The Network protocol of a Rule.", + "description": "The Network protocol of a Rule condition.", "enum": [ "TCP", "UDP", @@ -1023,7 +1027,7 @@ "ICMP" ], "x-ms-enum": { - "name": "FirewallPolicyRuleNetworkProtocol", + "name": "FirewallPolicyRuleConditionNetworkProtocol", "modelAsString": true } }, @@ -1043,21 +1047,21 @@ }, "description": "Response for ListFirewallPolicies API service call." }, - "FirewallPolicyRuleCollectionGroupListResult": { + "FirewallPolicyRuleGroupListResult": { "properties": { "value": { "type": "array", "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroup" + "$ref": "#/definitions/FirewallPolicyRuleGroup" }, - "description": "List of FirewallPolicyRuleCollectionGroups in a FirewallPolicy." + "description": "List of FirewallPolicyRuleGroups in a FirewallPolicy." }, "nextLink": { "type": "string", "description": "URL to get the next set of results." } }, - "description": "Response for ListFirewallPolicyRuleCollectionGroups API service call." + "description": "Response for ListFirewallPolicyRuleGroups API service call." }, "FirewallPolicyIntrusionSystemMode": { "type": "string", @@ -1070,6 +1074,26 @@ "name": "FirewallPolicyIntrusionSystemMode", "modelAsString": true } + }, + "FirewallPolicyThreatIntelWhitelist": { + "description": "ThreatIntel Whitelist for Firewall Policy.", + "x-ms-discriminator-value": "FirewallPolicyThreatIntelWhitelist", + "properties": { + "ipAddresses": { + "type": "array", + "description": "List of IP addresses for the ThreatIntel Whitelist.", + "items": { + "type": "string" + } + }, + "fqdns": { + "type": "array", + "description": "List of FQDNs for the ThreatIntel Whitelist.", + "items": { + "type": "string" + } + } + } } } }