AFD Profiles - Upgrade
Upgrade a profile from Standard_AzureFrontDoor to Premium_AzureFrontDoor.
POST https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Cdn/profiles/{profileName}/upgrade?api-version=2025-04-15
URI Parameters
Name | In | Required | Type | Description |
---|---|---|---|---|
profile
|
path | True |
string minLength: 1maxLength: 260 pattern: ^[a-zA-Z0-9]+(-*[a-zA-Z0-9])*$ |
Name of the Azure Front Door Standard or Azure Front Door Premium which is unique within the resource group. |
resource
|
path | True |
string minLength: 1maxLength: 90 pattern: ^[-\w\._\(\)]+$ |
Name of the Resource group within the Azure subscription. |
subscription
|
path | True |
string |
Azure Subscription ID. |
api-version
|
query | True |
string |
Version of the API to be used with the client request. Current version is 2025-04-15. |
Request Body
Name | Required | Type | Description |
---|---|---|---|
wafMappingList | True |
Web Application Firewall (WAF) and security policy mapping for the profile upgrade |
Responses
Name | Type | Description |
---|---|---|
200 OK |
OK. The request has succeeded. |
|
202 Accepted |
Accepted. The request has been accepted for processing and the operation will complete asynchronously. Headers location: string |
|
Other Status Codes |
Azure Front Door error response describing why the operation failed. |
Security
azure_auth
Azure Active Directory OAuth2 Flow.
Type:
oauth2
Flow:
implicit
Authorization URL:
https://login.microsoftonline.com/common/oauth2/authorize
Scopes
Name | Description |
---|---|
user_impersonation | impersonate your user account |
Examples
AFDProfiles_Upgrade
Sample request
POST https://management.azure.com/subscriptions/subid/resourceGroups/RG/providers/Microsoft.Cdn/profiles/profile1/upgrade?api-version=2025-04-15
{
"wafMappingList": [
{
"securityPolicyName": "securityPolicy1",
"changeToWafPolicy": {
"id": "/subscriptions/subid/resourcegroups/RG/providers/Microsoft.Network/frontdoorwebapplicationfirewallpolicies/waf2"
}
}
]
}
Sample response
{
"id": "/subscriptions/subid/resourcegroups/RG/providers/Microsoft.Cdn/profiles/profile1",
"type": "Microsoft.Cdn/profiles",
"name": "profile1",
"location": "Global",
"kind": "frontdoor",
"tags": {},
"sku": {
"name": "Standard_AzureFrontDoor"
},
"properties": {
"extendedProperties": {},
"frontDoorId": "id",
"originResponseTimeoutSeconds": 60,
"provisioningState": "Succeeded",
"resourceState": "Enabled"
}
}
Azure-AsyncOperation: https://management.azure.com/subscriptions/subid/resourcegroups/RG/providers/Microsoft.Cdn/operationresults/operationId?api-version=2025-04-15
{
"id": "/subscriptions/subid/resourcegroups/RG/providers/Microsoft.Cdn/profiles/profile1",
"type": "Microsoft.Cdn/profiles",
"name": "profile1",
"location": "Global",
"kind": "frontdoor",
"tags": {},
"sku": {
"name": "Standard_AzureFrontDoor"
},
"properties": {
"originResponseTimeoutSeconds": 60,
"frontDoorId": "id",
"extendedProperties": {},
"resourceState": "Upgrading",
"provisioningState": "Succeeded"
}
}
Definitions
Name | Description |
---|---|
scrubbing |
When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to. |
scrubbing |
Defines the state of a log scrubbing rule. Default value is enabled. |
Afd |
Error response |
Error |
The resource management error additional info. |
Error |
The error detail. |
Identity |
The type of identity that creates/modifies resources |
Managed |
Managed service identity (system assigned and/or user assigned identities) |
Managed |
Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed). |
Profile |
A profile is a logical grouping of endpoints that share the same settings. |
Profile |
Parameters required for profile upgrade. |
Profile |
Defines rules that scrub sensitive fields in the Azure Front Door profile logs. |
Profile |
Provisioning status of the profile. |
Profile |
Resource status of the profile. |
Profile |
Defines the contents of the log scrubbing rules. |
Profile |
State of the log scrubbing config. Default value is Enabled. |
Profile |
Parameters required for profile upgrade. |
Resource |
Reference to another resource. |
scrubbing |
The variable to be scrubbed from the logs. |
Sku |
Standard_Verizon = The SKU name for a Standard Verizon CDN profile. Premium_Verizon = The SKU name for a Premium Verizon CDN profile. Custom_Verizon = The SKU name for a Custom Verizon CDN profile. Standard_Akamai = The SKU name for an Akamai CDN profile. Standard_ChinaCdn = The SKU name for a China CDN profile for VOD, Web and download scenarios using GB based billing model. Standard_Microsoft = The SKU name for a Standard Microsoft CDN profile. Standard_AzureFrontDoor = The SKU name for an Azure Front Door Standard profile. Premium_AzureFrontDoor = The SKU name for an Azure Front Door Premium profile. Standard_955BandWidth_ChinaCdn = The SKU name for a China CDN profile for VOD, Web and download scenarios using 95-5 peak bandwidth billing model. Standard_AvgBandWidth_ChinaCdn = The SKU name for a China CDN profile for VOD, Web and download scenarios using monthly average peak bandwidth billing model. StandardPlus_ChinaCdn = The SKU name for a China CDN profile for live-streaming using GB based billing model. StandardPlus_955BandWidth_ChinaCdn = The SKU name for a China CDN live-streaming profile using 95-5 peak bandwidth billing model. StandardPlus_AvgBandWidth_ChinaCdn = The SKU name for a China CDN live-streaming profile using monthly average peak bandwidth billing model. |
Sku |
Name of the pricing tier. |
System |
Read only system data |
User |
User assigned identity properties |
scrubbingRuleEntryMatchOperator
When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.
Value | Description |
---|---|
EqualsAny |
scrubbingRuleEntryState
Defines the state of a log scrubbing rule. Default value is enabled.
Value | Description |
---|---|
Disabled | |
Enabled |
AfdErrorResponse
Error response
Name | Type | Description |
---|---|---|
error |
The error object. |
ErrorAdditionalInfo
The resource management error additional info.
Name | Type | Description |
---|---|---|
info |
object |
The additional info. |
type |
string |
The additional info type. |
ErrorDetail
The error detail.
Name | Type | Description |
---|---|---|
additionalInfo |
The error additional info. |
|
code |
string |
The error code. |
details |
The error details. |
|
message |
string |
The error message. |
target |
string |
The error target. |
IdentityType
The type of identity that creates/modifies resources
Value | Description |
---|---|
application | |
key | |
managedIdentity | |
user |
ManagedServiceIdentity
Managed service identity (system assigned and/or user assigned identities)
Name | Type | Description |
---|---|---|
principalId |
string (uuid) |
The service principal ID of the system assigned identity. This property will only be provided for a system assigned identity. |
tenantId |
string (uuid) |
The tenant ID of the system assigned identity. This property will only be provided for a system assigned identity. |
type |
Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed). |
|
userAssignedIdentities |
<string,
User |
User-Assigned Identities |
ManagedServiceIdentityType
Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
Value | Description |
---|---|
None | |
SystemAssigned | |
SystemAssigned, UserAssigned | |
UserAssigned |
Profile
A profile is a logical grouping of endpoints that share the same settings.
Name | Type | Description |
---|---|---|
id |
string |
Resource ID. |
identity |
Managed service identity (system assigned and/or user assigned identities). |
|
kind |
string |
Kind of the profile. Used by portal to differentiate traditional CDN profile and new AFD profile. |
location |
string |
Resource location. |
name |
string |
Resource name. |
properties.extendedProperties |
object |
Key-Value pair representing additional properties for profiles. |
properties.frontDoorId |
string |
The Id of the frontdoor. |
properties.logScrubbing |
Defines rules that scrub sensitive fields in the Azure Front Door profile logs. |
|
properties.originResponseTimeoutSeconds |
integer (int32) minimum: 16exclusiveMinimum: False |
Send and receive timeout on forwarding request to the origin. When timeout is reached, the request fails and returns. |
properties.provisioningState |
Provisioning status of the profile. |
|
properties.resourceState |
Resource status of the profile. |
|
sku |
The pricing tier (defines Azure Front Door Standard or Premium or a CDN provider, feature list and rate) of the profile. |
|
systemData |
Read only system data |
|
tags |
object |
Resource tags. |
type |
string |
Resource type. |
ProfileChangeSkuWafMapping
Parameters required for profile upgrade.
Name | Type | Description |
---|---|---|
changeToWafPolicy |
The new waf resource for the security policy to use. |
|
securityPolicyName |
string |
The security policy name. |
ProfileLogScrubbing
Defines rules that scrub sensitive fields in the Azure Front Door profile logs.
Name | Type | Description |
---|---|---|
scrubbingRules |
List of log scrubbing rules applied to the Azure Front Door profile logs. |
|
state |
State of the log scrubbing config. Default value is Enabled. |
ProfileProvisioningState
Provisioning status of the profile.
Value | Description |
---|---|
Creating | |
Deleting | |
Failed | |
Succeeded | |
Updating |
ProfileResourceState
Resource status of the profile.
Value | Description |
---|---|
AbortingMigration | |
Active | |
CommittingMigration | |
Creating | |
Deleting | |
Disabled | |
Migrated | |
Migrating | |
PendingMigrationCommit |
ProfileScrubbingRules
Defines the contents of the log scrubbing rules.
Name | Type | Description |
---|---|---|
matchVariable |
The variable to be scrubbed from the logs. |
|
selector |
string |
When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to. |
selectorMatchOperator |
When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to. |
|
state |
Defines the state of a log scrubbing rule. Default value is enabled. |
ProfileScrubbingState
State of the log scrubbing config. Default value is Enabled.
Value | Description |
---|---|
Disabled | |
Enabled |
ProfileUpgradeParameters
Parameters required for profile upgrade.
Name | Type | Description |
---|---|---|
wafMappingList |
Web Application Firewall (WAF) and security policy mapping for the profile upgrade |
ResourceReference
Reference to another resource.
Name | Type | Description |
---|---|---|
id |
string |
Resource ID. |
scrubbingRuleEntryMatchVariable
The variable to be scrubbed from the logs.
Value | Description |
---|---|
QueryStringArgNames | |
RequestIPAddress | |
RequestUri |
Sku
Standard_Verizon = The SKU name for a Standard Verizon CDN profile. Premium_Verizon = The SKU name for a Premium Verizon CDN profile. Custom_Verizon = The SKU name for a Custom Verizon CDN profile. Standard_Akamai = The SKU name for an Akamai CDN profile. Standard_ChinaCdn = The SKU name for a China CDN profile for VOD, Web and download scenarios using GB based billing model. Standard_Microsoft = The SKU name for a Standard Microsoft CDN profile. Standard_AzureFrontDoor = The SKU name for an Azure Front Door Standard profile. Premium_AzureFrontDoor = The SKU name for an Azure Front Door Premium profile. Standard_955BandWidth_ChinaCdn = The SKU name for a China CDN profile for VOD, Web and download scenarios using 95-5 peak bandwidth billing model. Standard_AvgBandWidth_ChinaCdn = The SKU name for a China CDN profile for VOD, Web and download scenarios using monthly average peak bandwidth billing model. StandardPlus_ChinaCdn = The SKU name for a China CDN profile for live-streaming using GB based billing model. StandardPlus_955BandWidth_ChinaCdn = The SKU name for a China CDN live-streaming profile using 95-5 peak bandwidth billing model. StandardPlus_AvgBandWidth_ChinaCdn = The SKU name for a China CDN live-streaming profile using monthly average peak bandwidth billing model.
Name | Type | Description |
---|---|---|
name |
Name of the pricing tier. |
SkuName
Name of the pricing tier.
Value | Description |
---|---|
Custom_Verizon | |
Premium_AzureFrontDoor | |
Premium_Verizon | |
StandardPlus_955BandWidth_ChinaCdn | |
StandardPlus_AvgBandWidth_ChinaCdn | |
StandardPlus_ChinaCdn | |
Standard_955BandWidth_ChinaCdn | |
Standard_Akamai | |
Standard_AvgBandWidth_ChinaCdn | |
Standard_AzureFrontDoor | |
Standard_ChinaCdn | |
Standard_Microsoft | |
Standard_Verizon |
SystemData
Read only system data
Name | Type | Description |
---|---|---|
createdAt |
string (date-time) |
The timestamp of resource creation (UTC) |
createdBy |
string |
An identifier for the identity that created the resource |
createdByType |
The type of identity that created the resource |
|
lastModifiedAt |
string (date-time) |
The timestamp of resource last modification (UTC) |
lastModifiedBy |
string |
An identifier for the identity that last modified the resource |
lastModifiedByType |
The type of identity that last modified the resource |
UserAssignedIdentity
User assigned identity properties
Name | Type | Description |
---|---|---|
clientId |
string (uuid) |
The client ID of the assigned identity. |
principalId |
string (uuid) |
The principal ID of the assigned identity. |