add SqlSetting property to azure firewall policy and corresponding property creation cmdlet

Author: b564518128

src/Network/Network/Az.Network.psd1

@@ -511,7 +511,8 @@ CmdletsToExport = 'Add-AzApplicationGatewayAuthenticationCertificate',
                'New-AzFirewallPolicyIntrusionDetectionBypassTraffic', 
                'New-AzFirewallPolicyIntrusionDetectionSignatureOverride', 
                'New-AzFirewallPolicyThreatIntelWhitelist', 
-               'New-AzFirewallPolicyDnsSetting', 'New-AzVirtualRouter', 
+               'New-AzFirewallPolicyDnsSetting', 'New-AzFirewallPolicySqlSetting',
+               'New-AzVirtualRouter', 
                'Remove-AzVirtualRouter', 'Get-AzVirtualRouter', 
                'Update-AzVirtualRouter', 'Add-AzVirtualRouterPeer', 
                'Update-AzVirtualRouterPeer', 'Remove-AzVirtualRouterPeer', 

src/Network/Network/AzureFirewallPolicy/NewAzureFirewallPolicyCommand.cs

@@ -73,11 +73,17 @@ public class NewAzureFirewallPolicyCommand : AzureFirewallPolicyBaseCmdlet
             HelpMessage = "The base policy to inherit from")]
         public string BasePolicy { get; set; }
 
-       [Parameter(
+        [Parameter(
             Mandatory = false,
             HelpMessage = "The DNS Setting")]
         public PSAzureFirewallPolicyDnsSettings DnsSetting { get; set; }
 
+        [Parameter(
+            Mandatory = false,
+            HelpMessage = "The SQL related setting"
+        )]
+        public PSAzureFirewallPolicySqlSettings SqlSetting { get; set; }
+
         [Parameter(
             Mandatory = false,
             ValueFromPipelineByPropertyName = true,
@@ -143,7 +149,7 @@ public override void Execute()
 
             base.Execute();
 
-            var present = NetworkBaseCmdlet.IsResourcePresent(() => GetAzureFirewallPolicy(this.ResourceGroupName, this.Name));  
+            var present = NetworkBaseCmdlet.IsResourcePresent(() => GetAzureFirewallPolicy(this.ResourceGroupName, this.Name));
             ConfirmAction(
                 Force.IsPresent,
                 string.Format(Properties.Resources.OverwritingResource, Name),
@@ -165,7 +171,9 @@ private PSAzureFirewallPolicy CreateAzureFirewallPolicy()
                 ThreatIntelWhitelist = this.ThreatIntelWhitelist,
                 BasePolicy = BasePolicy != null ? new Microsoft.Azure.Management.Network.Models.SubResource(BasePolicy) : null,
                 DnsSettings = this.DnsSetting,
-                Sku = new PSAzureFirewallPolicySku {
+                SqlSettings = this.SqlSetting,
+                Sku = new PSAzureFirewallPolicySku
+                {
                     Tier = this.SkuTier ?? MNM.FirewallPolicySkuTier.Standard
                 },
                 IntrusionDetection = this.IntrusionDetection,

src/Network/Network/AzureFirewallPolicy/SqlSetting/NewAzureFirewallSqlSettingCommand.cs

@@ -0,0 +1,44 @@
+// ----------------------------------------------------------------------------------
+//
+// Copyright Microsoft Corporation
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+// http://www.apache.org/licenses/LICENSE-2.0
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+// ----------------------------------------------------------------------------------
+
+using System.Management.Automation;
+using Microsoft.Azure.Commands.Network.Models;
+using System.Linq;
+
+namespace Microsoft.Azure.Commands.Network
+{
+    [Cmdlet(VerbsCommon.New, ResourceManager.Common.AzureRMConstants.AzureRMPrefix + "FirewallPolicySqlSetting", SupportsShouldProcess = true), OutputType(typeof(PSAzureFirewallPolicySqlSettings))]
+    public class NewAzureFirewallSqlSettingCommand : NetworkBaseCmdlet
+    {
+
+        [Parameter(
+            Mandatory = false,
+            HelpMessage = "Allow SQL server redirect mode traffic. By default this type of traffic is not allowed."
+        )]
+        public SwitchParameter AllowSqlRedirect { get; set; }
+
+        public override void Execute()
+        {
+            base.Execute();
+
+            var sqlSetting = new PSAzureFirewallPolicySqlSettings
+            {
+                AllowSqlRedirect = this.AllowSqlRedirect.IsPresent ? true : (bool?)null,
+            };
+
+            WriteObject(sqlSetting);
+        }
+
+    }
+}

src/Network/Network/ChangeLog.md

@@ -19,6 +19,11 @@
 --->
 
 ## Upcoming Release
+* Added new property `SqlSetting` for Azure Firewall Policy cmdlets 
+    - `Get-AzFirewallPolicy` 
+    - `New-AzFirewallPolicy`
+* Added new to create new `SqlSetting` object for creating Azure Firewall Policy
+    - `New-AzFirewallPolicySqlSetting`
 
 ## Version 4.14.0
 * Used case-insensitive comparison for ResourceId (Set/New-NetworkWatcherFlowLog)

src/Network/Network/Common/NetworkResourceManagerProfile.cs

@@ -1340,13 +1340,15 @@ private static void Initialize()
 
                 // Azure Firewall Policies
                 // CNM to MNM
+                cfg.CreateMap<CNM.PSAzureFirewallPolicySqlSettings, MNM.FirewallPolicySQL>();
                 cfg.CreateMap<CNM.PSAzureFirewallPolicyRuleCollectionGroup, MNM.FirewallPolicyRuleCollectionGroup>();
                 cfg.CreateMap<CNM.PSAzureFirewallPolicy, MNM.FirewallPolicy>().ForCtorParam("dnsSettings", opt =>
                 {
                     opt.MapFrom(src => src.DnsSettings == null ? null : new MNM.DnsSettings(src.DnsSettings.Servers, src.DnsSettings.EnableProxy, null));
                 });
 
                 // MNM to CNM
+                cfg.CreateMap<MNM.FirewallPolicySQL, CNM.PSAzureFirewallPolicySqlSettings>();
                 cfg.CreateMap<MNM.FirewallPolicyRuleCollectionGroup, CNM.PSAzureFirewallPolicyRuleCollectionGroup>();
                 cfg.CreateMap<MNM.FirewallPolicy, CNM.PSAzureFirewallPolicy>();
 

src/Network/Network/Models/AzureFirewallPolicy/PSAzureFirewallPolicy.cs

@@ -44,6 +44,8 @@ public class PSAzureFirewallPolicy : PSTopLevelResource
 
         public PSAzureFirewallPolicyDnsSettings DnsSettings { get; set; }
 
+        public PSAzureFirewallPolicySqlSettings SqlSettings { get; set; }
+
         public PSAzureFirewallPolicyIntrusionDetection IntrusionDetection { get; set; }
 
         public PSAzureFirewallPolicyTransportSecurity TransportSecurity { get; set; }

src/Network/Network/Models/AzureFirewallPolicy/PSAzureFirewallPolicySqlSettings.cs

@@ -0,0 +1,24 @@
+//
+// Copyright (c) Microsoft.  All rights reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//   http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+
+using System.Collections.Generic;
+
+namespace Microsoft.Azure.Commands.Network.Models
+{
+    public class PSAzureFirewallPolicySqlSettings
+    {
+        public bool? AllowSqlRedirect { get; set; }
+    }
+}