Azure Infrastructure Overview

Total Resources

14

14 healthy · 0 degraded

WAF Blocks (24h)

47

+12 vs yesterday

Active Exclusions

6

Across 2 WAF policies

SAS Token TTL

247d

Auto-rotation enabled

Resource Health

Resource	Type	Status
fd-waf-prod	Front Door	Healthy
spaxk3f9a	Storage Account	Healthy
kv-waf-prod	Key Vault	Healthy
waf-appgw-prod	App Gateway WAF	Healthy
waf-fd-prod	Front Door WAF	Warning
la-waf-logs	Log Analytics	Healthy

Recent Activity

28 Feb 11:42

SAS Token Rotated

kv-waf-prod → spaxk3f9a · Auto-rotation

28 Feb 09:15

WAF Block — SQLi Attempt

Rule 942100 · 185.220.101.47 · Front Door

27 Feb 17:30

Terraform Apply

rg-spa-blob · 3 resources updated · Azure DevOps

27 Feb 14:00

WAF Exclusion Added

Rule 920300 · RequestHeaderNames · /api/upload

26 Feb 08:45

Health Probe Warning

fd-waf-prod · Origin latency spike · Resolved

Storage & Secrets

📦 spaxk3f9a

Healthy

TypeStorageV2

ReplicationLRS

Static WebsiteEnabled

Public AccessIP Restricted

SAS RotationAuto · 247d TTL

Endpointspaxk3f9a.z8.web.core.windows.net

🔑 kv-waf-prod

Healthy

SKUStandard

Soft Delete90 days

RBACEnabled

Secrets3 active

FD IdentitySecrets User

NetworkPrivate Endpoint

Front Door & WAF

🌐 fd-waf-prod

Healthy

SKUPremium

WAF Policywaf-fd-prod

Originspa-storage-origin

Private LinkApproved

IdentitySystem Assigned

CacheIgnoreQueryString

⛨ waf-fd-prod

Warning

ModePrevention

Rule SetOWASP 3.2

Custom Rules4 active

Exclusions6 active

Blocks (24h)47

Managed ByTerraform

Active Exclusions

Rule	Match Variable	Selector	Policy
920300	RequestHeaderNames	/api/upload	FD
931130	RequestCookieNames	.AspNetCore.Session	FD
942100	RequestBodyPostArgNames	search_query	AGW
942200	RequestBodyPostArgNames	filter_sql	AGW
920420	RequestHeaderNames	Content-Type	FD
913100	RequestUriName	/health	AGW

Top Triggered Rules (24h)

942100SQL Injection (libinjection)Block18 hits

941100XSS via libinjectionBlock12 hits

930100Path Traversal AttackBlock9 hits

920350Host Header IP AddressLog5 hits

913100Security Scanner DetectedBlock3 hits

Traffic Flow

👤

User

Public Internet

→

HTTPS

🌐

Front Door

Premium · WAF

→

Private Link

📦

Storage

Blob · $web

              ↕ Key Vault via Managed Identity
              ↕ Logs → Log Analytics Workspace
            

Network Rules — Storage

Rule	Value	Action
Default	*	Deny
IP Rule	203.x.x.x/32	Allow
Bypass	AzureServices	Allow

Private Endpoints

Resource	Sub-resource	Status
spaxk3f9a	blob	Approved
kv-waf-prod	vault	Approved

Deployment History

Date	Pipeline	Changes	Author	Status
2026-02-27 17:30	waf-infra-prod	3 updated · 0 destroyed	root	Success
2026-02-25 14:10	waf-infra-prod	1 added · 2 updated	root	Success
2026-02-20 09:45	waf-exclusions	2 updated	root	Success
2026-02-18 16:22	waf-infra-prod	5 added · 1 updated	root	Success
2026-02-15 11:00	spa-hosting	3 added	root	Partial
2026-02-10 08:30	waf-exclusions	1 updated	root	Failed

Terraform State

📋 waf-infra-prod.tfstate

Clean

Resources14

DriftNone detected

BackendAzure Blob

Last Apply2026-02-27

📋 spa-hosting.tfstate

Clean

Resources4

DriftNone detected

BackendAzure Blob

Last Apply2026-02-27