in Azure WAF/Alert - Process Azure FrontDoor Alerts/ProcessAFDAlerts.cs [194:204]
private static void UpdateWafWithRulesToStopAttack(
WebApplicationFirewallPolicy wafPolicy,
AlertInfo alertInfo,
IEnumerable<Row> logs)
{
// 1. Create or update a rule to rate limit country traffic
CreateOrUpdateRateLimitCountryRule(wafPolicy, alertInfo);
// 2. Create or update a rule to rate limit the IPs sending requests over dynamically detected baseline
CreateOrUpdateRateLimitIpsRule(wafPolicy, alertInfo, logs);
}