Forum Discussion

Juergen_Mang's avatar
Juergen_Mang
Icon for MVP rankMVP
Dec 07, 2022

AWAF OpenAPI Import and default defense attribute values for json content profiles

Hi Folks, I created an ASM Security Policy with the default API-Security template and imported an OpenAPI file. This works perfectly: allowed urls and matching json content profiles are created. It...
security
Juergen_Mang's avatar
Juergen_Mang
Icon for MVP rankMVP
Dec 22, 2022

Meanwhile I found a solution that works for me: My script, thats creates the declarative waf policy, parses now the OpenAPI file and adds the necessary json content profile declarations to the final policy file. The OpenAPI import through the declaration executes the other steps: creates and adds the json schmema to the already created json content profile.

I think this is a better solution than making some API requests after policy import to change this values.