Cloud Armor release notes

Cloud Armor supports advanced match conditions to include attributes for inspecting request body content and parameters in Preview. This lets you write custom CEL rules to filter traffic based on raw body content, structured data (JSON, Form Data, GraphQL), and query parameters. For more information, see Configure custom rules language attributes.

Global Front End is a unified offering that simplifies billing by consolidating pricing across networking products. Cloud Armor is included in the Global Front End Enterprise billing tier. Enabling Global Front End Enterprise in a project enables specific Cloud Armor Enterprise features for your global external Application Load Balancers. For more information, see Global Front End.This feature is available in Preview.

Cloud Armor preconfigured rules support ModSecurity Core Rule Set (CRS) 4.22 as a rule source. For more information, see Tuning Google Cloud Armor WAF rules. This feature is Generally Available.

Cloud Armor preconfigured rules support ModSecurity Core Rule Set (CRS) 4.22 as a rule source. For more information, see Tuning Google Cloud Armor WAF rules. This feature is available in Preview.

Cloud Armor supports a visual Match Condition Builder that allows you to create complex expressions in Common Expression Language (CEL) without writing raw code. For more information, see Use the Match Condition Builder.

Security fixes and enhancements to Cloud Armor preconfigured WAF canary rulesets for v3.0. For more information, see Tuning Google Cloud Armor WAF rules.

The following rulesets have been updated:

• sqli-canary
• xss-canary
• lfi-canary
• rfi-canary
• rce-canary
• methodenforcement-canary
• scannerdetection-canary
• protocolattack-canary
• php-canary
• sessionfixation-canary

Cloud Armor