Maximum of 3 Global Actions

[jeastburn]

There seems to be a limit of 3 global actions in the Rules Engine (after adding three, the "Add Action" button is disabled). And since you can't create a non-global rule without a condition, I don't see how it is possible to append more than 3 security headers, such as Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy.
Is there a better way to accomplish this in the Standard CDN? The Verizon Premium CDN does not have this limit.

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 7f7c20cf-3978-d4e5-cd89-e77ae59f4afb
• Version Independent ID: 70019c90-4f00-6592-f0f7-25930287837e
• Content: Use a rules engine to enforce HTTPS in Standard Azure CDN
• Content Source: articles/cdn/cdn-standard-rules-engine.md
• Service: azure-cdn
• GitHub Login: @mdgattuso
• Microsoft Alias: magattus

[BharathNimmala-MSFT]

@jeastburn Thank you for your query, we will further look into it and get back to you at the earliest.

[TravisCragg-MSFT]

@jeastburn You are limited on 3 actions per rule, but you can make multiple rules that match on the same condition.

if you would like us to add more actions per rule, please leave your feedback at Azure Networking's feedback.azure.com page.

[jeastburn]

Thanks @TravisCragg-MSFT. I think 3 actions per rule is sufficient for custom rules, but since custom rules MUST have a condition specified (you are directed to use the global rule if you want actions that always trigger), this means that you can only ever have 3 always-triggered actions. I suppose I could add custom rules with conditions that would always trigger as a workaround, but that isn't as clear as if they were included in the global rule.

I'll leave feedback for this too. Thanks.

[TravisCragg-MSFT]

@jeastburn Thanks for the follow up. let me know if you need any additional assistance.

We will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue.

@mdgattuso FYI