# SFR2 - WAF Aligned

Module Specification for the Azure Verified Modules (AVM) program

ID: SFR2 - Category: Composition - WAF Aligned Modules SHOULD set defaults in input parameters/variables to align to high priority/impact/severity recommendations, where appropriate and applicable, in the following frameworks and resources:
Well-Architected Framework (WAF) Reliability Hub Azure Proactive Resiliency Library (APRL) Only Product Group (PG) verified Microsoft Defender for Cloud (MDFC) They SHOULD NOT align to these recommendations when it requires an external dependency/resource to be deployed and configured and then associated to the resources in the module.
Alignment SHOULD prioritize best-practices and security over cost optimization, but MUST allow for these to be overridden by a module consumer easily, if desired.
Tip Read the FAQ of What does AVM mean by “WAF Aligned”? for more detailed information and examples.


---
Source: https://raw.githubusercontent.com/Azure/Azure-Verified-Modules/refs/heads/main/docs/content/specs-defs/includes/shared/shared/functional/SFR2.md
Last Modified: 0001-01-01