New Resource: Front Door Firewall Policy

azurerm/internal/services/frontdoor/client.go

@@ -8,6 +8,7 @@ import (
 type Client struct {
 	FrontDoorsClient         *frontdoor.FrontDoorsClient
 	FrontDoorsFrontendClient *frontdoor.FrontendEndpointsClient
+	FrontDoorsPolicyClient   *frontdoor.PoliciesClient
 }
 
 func BuildClient(o *common.ClientOptions) *Client {
@@ -17,8 +18,12 @@ func BuildClient(o *common.ClientOptions) *Client {
 	frontDoorsFrontendClient := frontdoor.NewFrontendEndpointsClientWithBaseURI(o.ResourceManagerEndpoint, o.SubscriptionId)
 	o.ConfigureClient(&frontDoorsFrontendClient.Client, o.ResourceManagerAuthorizer)
 
+	frontDoorsPolicyClient := frontdoor.NewPoliciesClientWithBaseURI(o.ResourceManagerEndpoint, o.SubscriptionId)
+	o.ConfigureClient(&frontDoorsPolicyClient.Client, o.ResourceManagerAuthorizer)
+
 	return &Client{
 		FrontDoorsClient:         &frontDoorsClient,
 		FrontDoorsFrontendClient: &frontDoorsFrontendClient,
+		FrontDoorsPolicyClient:   &frontDoorsPolicyClient,
 	}
 }

azurerm/internal/services/frontdoor/helper.go

@@ -75,6 +75,7 @@ func GetFrontDoorBasicRouteConfigurationType(i interface{}) string {
 		return "ForwardingConfiguration"
 	}
 }
+
 func VerifyRoutingRuleFrontendEndpoints(routingRuleFrontends []interface{}, configFrontendEndpoints []interface{}) error {
 	for _, routingRuleFrontend := range routingRuleFrontends {
 		// Get the name of the frontend defined in the routing rule
@@ -178,3 +179,4 @@ func VerifyCustomHttpsConfiguration(configFrontendEndpoints []interface{}) error
 
 	return nil
 }
+

azurerm/internal/services/frontdoor/validate.go

@@ -23,6 +23,14 @@ func ValidateBackendPoolRoutingRuleName(i interface{}, k string) (_ []string, er
 	return nil, errors
 }
 
+func ValidateCustomBlockResponseBody(i interface{}, k string) (_ []string, errors []error) {
+	if m, regexErrs := validate.RegExHelper(i, k, `^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{4})$`); !m {
+		errors = append(regexErrs, fmt.Errorf(`%q contains invalid characters, %q must contain only alphanumeric and equals sign characters.`, k))
+	}
+
+	return nil, errors
+}
+
 func ValidateFrontdoorSettings(d *schema.ResourceDiff) error {
 	routingRules := d.Get("routing_rule").([]interface{})
 	configFrontendEndpoints := d.Get("frontend_endpoint").([]interface{})

azurerm/provider.go

@@ -240,6 +240,7 @@ func Provider() terraform.ResourceProvider {
 		"azurerm_firewall_network_rule_collection":                   resourceArmFirewallNetworkRuleCollection(),
 		"azurerm_firewall":                                           resourceArmFirewall(),
 		"azurerm_frontdoor":                                          resourceArmFrontDoor(),
+		"azurerm_frontdoor_firewall_policy":                          resourceArmFrontDoorFirewallPolicy(),
 		"azurerm_function_app":                                       resourceArmFunctionApp(),
 		"azurerm_hdinsight_hadoop_cluster":                           resourceArmHDInsightHadoopCluster(),
 		"azurerm_hdinsight_hbase_cluster":                            resourceArmHDInsightHBaseCluster(),