Forum Discussion

forsan's avatar
forsan
Icon for Altostratus rankAltostratus
Jun 10, 2022

Declarative Policy WAF with custom partition

Hi,

I'm trying to deploy a WAF policy using Declarative Policy using the following guide:
https://techdocs.f5.com/en-us/bigip-15-1-0/big-ip-declarative-security-policy/declarative-policy-importing.html#concept-386

It works when deploying to Common partition, but I want to use a custom partition where the service account only has access to the partition I named Api. 

When using admin account I send this:

{
"fileReference": {
},
"policy":{
"fullPath":"/Api/swagger-policy-1"
}
}

The result I get is:

"items": [
{
"isBase64": false,
"executionStartTime": "2022-06-10T12:15:41Z",
"status": "COMPLETED",
"lastUpdateMicros": 1.654863352e+15,
"getPolicyAttributesOnly": false,
"kind": "tm:asm:tasks:import-policy:import-policy-taskstate",
"filename": "",
"endTime": "2022-06-10T12:15:53Z",
"id": "2m4mUX_BJzghS83ktGM30g",
"startTime": "2022-06-10T12:15:41Z",
"retainInheritanceSettings": false,
"result": {
"policyReference": {
"fullPath": "/Common/swagger"
},
"message": "The operation was completed successfully. The security policy name is '/Common/swagger'. Policy Template set to API Security."
},
"fileReference": {
"link": "gitlab.mindoman.se/abcde/api/-/raw/main/swagger.json"
}
}
 
So the policy is created in Common, not in /Api as specified in fullPath.
Anyone that has succeded to deploy in custom partition?
Br Andréas
devops
security