SFR2 - WAF Aligned

Updated on Dec 2, 2024 One minute to read Category-Naming/Composition Class-Pattern Class-Resource Language-Bicep Language-Terraform Lifecycle-BAU Persona-Owner Severity-SHOULD Type-Functional Validation-TBD

ID: SFR2 - Category: Composition - WAF Aligned

Modules SHOULD set defaults in input parameters/variables to align to high priority/impact/severity recommendations, where appropriate and applicable, in the following frameworks and resources:

Well-Architected Framework (WAF)
Reliability Hub
Azure Proactive Resiliency Library (APRL)
- Only Product Group (PG) verified
Microsoft Defender for Cloud (MDFC)

They SHOULD NOT align to these recommendations when it requires an external dependency/resource to be deployed and configured and then associated to the resources in the module.

Alignment SHOULD prioritize best-practices and security over cost optimization, but MUST allow for these to be overridden by a module consumer easily, if desired.

Read the FAQ of What does AVM mean by “WAF Aligned”? for more detailed information and examples.