Add support for az network application-gateway waf-policy Microsoft_DefaultRuleSet 2.2 ruleset

[yoavmal]

Preconditions

• No need to upgrade Python SDK or the Python SDK is ready.

Related command

az network application-gateway waf-policy managed-rule rule-set update --policy-name <> --resource-group <> --type 'Microsoft_DefaultRuleSet' --version '2.2'

az network application-gateway waf-policy managed-rule rule-set add --policy-name <> --resource-group <> --type 'Microsoft_DefaultRuleSet' --version '2.2'

Resource Provider

Microsoft.Network/applicationGateways

Description of Feature or Work Requested

Add support for az network application-gateway waf-policy Microsoft_DefaultRuleSet 2.2 ruleset

Ref issue: link.
Ref PR: link.

Minimum API Version Required

N/A

Swagger PR link / SDK link

N/A

Request Example

No response

Target Date

2025-08-20

PM Contact

yuvalpery

Engineer Contact

yoavmalichi

Additional context

The rulesets versions shouldn't be validated against a schema of values.
In Az PowerShell it forwards the request to the backend and worst case returns an error from the backend.
Removing the schema validation will save a new issue for each newly released ruleset version.

[yonzhan]

Thank you for opening this issue, we will look into it.

[github-actions]

Here are some similar issues that might help you. Please check if they can solve your problem.

• az network application-gateway waf-policy does not support Bot 1.0 ruleset #26888
• Changing the Default Rule Set to DRS2.1 in Firewall Policy #28210

Powered by issue-sentinel