Enforce HTTPS Redirection for Azure Application Gateway Listeners

import json try: result = _exe(None, "az account show") account_info = json.loads(result) subscription_id = account_info["id"] print("Fetched Subscription Id") print(subscription_id) # for debugging except json.JSONDecodeError: print("Error decoding JSON response from Azure CLI.") subscription_id = None

from azure.identity import DefaultAzureCredential from azure.mgmt.network import NetworkManagementClient from azure.core.exceptions import HttpResponseError # Initialize Azure credentials and NetworkManagementClient credential = DefaultAzureCredential() network_client = NetworkManagementClient(credential, subscription_id) try: app_gateways = list(network_client.application_gateways.list_all()) if not app_gateways: print("No application gateways found in the subscription.") else: total_listeners = 0 listeners_without_https = [] for app_gw in app_gateways: if app_gw.http_listeners: for listener in app_gw.http_listeners: total_listeners += 1 if listener.protocol != "Https": listeners_without_https.append(listener) print(f"Listener without HTTPS found: {listener.name} in Application Gateway: {app_gw.name}") print(f"Processed {len(app_gateways)} Application Gateway(s).") print(f"Total HTTP listener(s) found: {total_listeners}.") if not listeners_without_https: print("All listener(s) are already configured for HTTPS.") else: print(f"Found {len(listeners_without_https)} listener(s) without HTTPS out of {total_listeners} total listener(s).") except HttpResponseError as e: print(f"An error occurred with the Azure HTTP response: {e}") except Exception as e: print(f"An unexpected error occurred: {e}") context.proceed = False

from azure.identity import DefaultAzureCredential from azure.mgmt.network import NetworkManagementClient from azure.core.exceptions import HttpResponseError # Initialize Azure credentials and NetworkManagementClient credential = DefaultAzureCredential() network_client = NetworkManagementClient(credential, subscription_id) try: if not app_gateways: print("No application gateways found in the subscription.") else: for app_gw in app_gateways: modified = False # Iterate through each HTTP listener in the application gateway for listener in app_gw.http_listeners: if listener.protocol != "Https": if listener.ssl_certificate: # Check if SSL certificate is already associated # Update the protocol to HTTPS listener.protocol = "Https" modified = True print(f"Updated listener {listener.name} in Application Gateway {app_gw.name} to use HTTPS.") else: print(f"No SSL certificate found for listener {listener.name}. Cannot update to HTTPS.") if modified: # Save the updated application gateway configuration network_client.application_gateways.create_or_update( app_gw.resource_group_name, app_gw.name, app_gw ).wait() print(f"Successfully updated Application Gateway: {app_gw.name}") else: print(f"No modifications required for Application Gateway: {app_gw.name}") except HttpResponseError as e: print(f"An error occurred with the Azure HTTP response: {e}") except Exception as e: print(f"An unexpected error occurred: {e}")