Google Cloud Armor

gcp Web application firewallgoogle-cloud-armor

Edge security policy with WAF rules, rate limiting and DDoS defence.

Provider: gcp
Kind: Web application firewall
Category: Security
Official docs: https://cloud.google.com/armor/docs/cloud-armor-overview

Properties · 2 set by this component

property	type	values	required	kind default	this component
adaptiveProtection · component property	boolean	—	no	—	inherited
botProtection	boolean	—	no	—	inherited
customRuleCount	integer	—	no	—	inherited
defaultRuleAction · component property	enum	allow \| deny	no	deny	inherited
managed	boolean	—	no	false	▸ true
managedRuleSet	string	—	no	—	inherited
mode	enum	detection \| prevention \| off	no	—	▸ prevention
policyType · component property	enum	backend \| edge \| network-edge \| internal-service	no	backend	inherited
preconfiguredWafRules · component property	boolean	—	no	false	inherited
rateLimiting	boolean	—	no	—	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "cloud-armor", component: "google-cloud-armor" }

Other Web application firewall products · 13

Web Application Firewallalibaba-wafalibabacloudwaf AWS WAF web ACLaws-wafawswaf AWS WAF Classicaws-waf-classicawswaf Azure Web Application Firewallazure-web-application-firewallazurewaf Firewall for AIcloudflare-firewall-for-aicloudflarewaf Cloudflare WAFcloudflare-wafcloudflarewaf Corazacorazawaf Imperva Application Securityimpervawaf ModSecuritymodsecuritywaf NAXSInaxsiwaf Generic web application firewallwafwaf reCAPTCHA Enterprisegoogle-recaptcha-enterprisegcpwaf Web Application Firewalloci-wafociwaf

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Google Cloud Armor security policy: request filtering, WAF and rate limiting in front of load balancers and CDN.
3# Defaults from "Security policy overview" and "Configure security policies": every policy carries a default rule at priority 2147483647 whose action is deny, and rules are not in preview mode unless --preview is passed, so the policy enforces.
4schemaVersion: "1"
5type: "component"
6id: "google-cloud-armor"
7kind: "waf"
8provider: "gcp"
9docs: "https://cloud.google.com/armor/docs/cloud-armor-overview"
10defaults:
11  managed: true
12  mode: "prevention"
13properties:
14  policyType:
15    type: "enum"
16    values: ["backend", "edge", "network-edge", "internal-service"]
17    default: "backend"
18  defaultRuleAction:
19    type: "enum"
20    values: ["allow", "deny"]
21    default: "deny"
22  preconfiguredWafRules:
23    type: "boolean"
24    default: false
25  adaptiveProtection:
26    type: "boolean"

The same page as markdown, for an agent: /catalogue/components/google-cloud-armor.md