Cloud Armor release notes

Cloud Armor supports advanced match conditions to include attributes for inspecting request body content and parameters in Preview. This lets you write custom CEL rules to filter traffic based on raw body content, structured data (JSON, Form Data, GraphQL), and query parameters. For more information, see Configure custom rules language attributes.

Global Front End is a unified offering that simplifies billing by consolidating pricing across networking products. Cloud Armor is included in the Global Front End Enterprise billing tier. Enabling Global Front End Enterprise in a project enables specific Cloud Armor Enterprise features for your global external Application Load Balancers. For more information, see Global Front End.This feature is available in Preview.

Cloud Armor preconfigured rules support ModSecurity Core Rule Set (CRS) 4.22 as a rule source. For more information, see Tuning Google Cloud Armor WAF rules. This feature is Generally Available.

Cloud Armor preconfigured rules support ModSecurity Core Rule Set (CRS) 4.22 as a rule source. For more information, see Tuning Google Cloud Armor WAF rules. This feature is available in Preview.

Cloud Armor supports a visual Match Condition Builder that allows you to create complex expressions in Common Expression Language (CEL) without writing raw code. For more information, see Use the Match Condition Builder.

Security fixes and enhancements to Cloud Armor preconfigured WAF canary rulesets for v3.0. For more information, see Tuning Google Cloud Armor WAF rules.

The following rulesets have been updated:

• sqli-canary
• xss-canary
• lfi-canary
• rfi-canary
• rce-canary
• methodenforcement-canary
• scannerdetection-canary
• protocolattack-canary
• php-canary
• sessionfixation-canary

Cloud Armor preconfigured WAF rules support for inspection up to the first 64 kB (either 8 kB, 16 kB, 32 kB, 48 kB, or 64 kB) of the request body content is Generally Available.

Security fixes and enhancements to Cloud Armor preconfigured WAF v33-canary rulesets. For more information, see Tuning Google Cloud Armor WAF rules.

The following rulesets have been updated:

• sqli-v33-canary
• xss-v33-canary
• lfi-v33-canary
• rfi-v33-canary
• rce-v33-canary
• methodenforcement-v33-canary
• scannerdetection-v33-canary
• protocolattack-v33-canary
• php-v33-canary
• sessionfixation-v33-canary
• java-v33-canary
• nodejs-v33-canary

The Cloud Armor cve-canary rules include the google-mrs-v202512-id000002-rce signature to help detect and mitigate CVE-2025-55182. For more information, see Cloud Armor preconfigured WAF rules overview.

The Cloud Armor cve-canary rules include the google-mrs-v202512-id000001-rce signature to help detect and mitigate CVE-2025-55182. For more information, see Cloud Armor preconfigured WAF rules overview.

Cloud Armor's Hierarchical security policies that facilitate centralized control, enhanced consistency, operational efficiency, and effective delegation of security policy management is Generally Available.

Cloud Armor supports Autonomous System Numbers (ASNs) in globally scoped edge security policies for Media CDN edge cache services, and it is Generally Available.

Cloud Armor supports Network Threat Intelligence (NTI) in globally scoped edge security policies for Media CDN edge cache services, and it is Generally Available.

Cloud Armor supports organization-scoped address groups for security policies, and it is Generally Available.

Cloud Armor supports Autonomous System Numbers (ASNs) in globally scoped edge security policies for Media CDN edge cache services in Preview.

Cloud Armor supports internal service security policies for the service mesh to enforce global server-side rate limiting per client in Preview.

Cloud Armor preconfigured WAF rules can now inspect up to the first 64 kB (either 8 kB, 16 kB, 32 kB, 48 kB, or 64 kB) of the request body content in Preview.

Cloud Armor's Hierarchical security policies facilitate centralized control, enhanced consistency, operational efficiency, and effective delegation of security policy management in Preview.

Cloud Armor supports organization-scoped address groups for security policies in Preview.

Cloud Armor supports Network Threat Intelligence (NTI) in globally scoped edge security policies for Media CDN edge cache services in Preview.

Cloud Armor supports JA4 rate limiting key, and it is Generally Available. For more information, see Configure rate limiting.