AS3 for ASM Policy Creation

Greetings,

 

I validated your declaration using the instructions in

https://clouddocs.f5.com/products/extensions/f5-appsvcs-extension/latest/userguide/validate.html

and found a few issues.

It appears that you cannot create a custom application with the "Common" tenant so I changed that to "MyTenant. Also the "template" and "description" properties are not valid for the WAF_Policy object. Instead I used the "policy" property with a "text" reference to create a policy. I got this declaration to work in our lab environment here at F5:

{
    "$schema": "https://raw.githubusercontent.com/F5Networks/f5-appsvcs-extension/refs/heads/main/schema/latest/as3-schema.json",
    "class": "AS3",
    "action": "deploy",
    "persist": true,
    "declaration": {
        "class": "ADC",
        "schemaVersion": "3.0.0",
        "id": "transparent_waf_policy_only_declaration",
        "label": "Transparent WAF Policy Only Deployment",
        "remark": "Deploys only a transparent WAF...",
        "MyTenant": {
            "class": "Tenant",
            "MyWAFPolicyApplication": {
                "class": "Application",
                "template": "generic",
                "Transparent_Security_Policy": {
                    "class": "WAF_Policy",
                    "policy": {
                        "text": "{\n  \"policy\": {\n    \"name\":\"AppPolicy01\",\n    \"description\":\"embedded WAF Policy\",\n  \"enforcementMode\":\"transparent\",\n   \"template\": {\n    \"name\":\"POLICY_TEMPLATE_FUNDAMENTAL\"\n    }\n    }\n  }"
                                   
                    }
                }
            }
        }
    }
}

 

These docs were helpful with composing the above declaration:

https://clouddocs.f5.com/products/extensions/f5-appsvcs-extension/latest/refguide/schemaref/WAF_Policy.schema.json.html?highlight=waf_policy

https://clouddocs.f5.com/products/extensions/f5-appsvcs-extension/latest/declarations/application-security.html?highlight=waf_policy