Skip to content

4.1.1

Release Date: April 8, 2026

🐛 Bug Fixes

azure-networking: WAF Firewall Policy Default Mode Changed to Detection

The frontdoor_firewall_policy module previously defaulted the mode variable to Prevention, which could cause unintended traffic blocking on first deployment when no explicit mode was provided. The default is now Detection.

Details:

  • Before: mode = "Prevention" — active blocking on first apply without explicit configuration
  • After: mode = "Detection" — logs matched requests without blocking, giving operators time to review WAF rule matches before enabling active enforcement

No changes are required for consumers who already set mode explicitly. Consumers relying on the previous default will now need to set mode = "Prevention" explicitly if blocking behaviour is required.

References: PR #11

🔄 Breaking Changes

  • azure-networking: The default mode for frontdoor_firewall_policy changed from Prevention to Detection. Consumers who relied on the previous default and still require blocking behaviour must now explicitly set mode = "Prevention".

📋 Additional Notes

  • Total commits: 1
  • Files changed: 1
  • Contributors: Brian Sheridan

Support

  • 📧 Teams Support Channel: Support