Declarative Advanced WAF policy lifecycle in a CI/CD pipeline

The purpose of this article is to show the configuration used to deploy a declarative Advanced WAF policy to a BIG-IP and automatically configure it to protect an API workload by consuming an OpenAPI...
Published Sep 22, 2020
Version 1.0
AS3
ASM Advanced WAF
BIG-IP
CICD
Declarative WAF
security
series-api-security
Super-NetOps
B_Earp's avatar
B_Earp
Icon for Altocumulus rankAltocumulus
Oct 03, 2024

Using the uri option in the declaration it is unclear how the policy arrives at the BIG-IP. 

 "My_ASM_Policy": {
        "class": "WAF_Policy",
        "url": "https://example.com/asm-policy.xml",
        "ignoreChanges": true

How does the data from that url get uploaded/downloaded to the big-ip.

1. PUSH: Does the AS3 software include the json data from that url as part of it's declaration?

2. PULL: Does the BIG-IP download the json from that url?