There is a command group 'az_network_front door_waf policy'. This group of commands could 'manage webapplication firewall  waf  policies'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_network_front door_waf policy_create'.The syntax is: az network front-door waf-policy create --name
                                        --resource-group
                                        [--custom-block-response-body]
                                        [--custom-block-response-status-code]
                                        [--disabled {false, true}]
                                        [--mode {detection, prevention}]
                                        [--redirect-url]
                                        [--request-body-check {disabled, enabled}]
                                        [--sku {classic_azurefrontdoor, premium_azurefrontdoor, standard_azurefrontdoor}]
                                        [--tags]. The parameter '--name -n' is required. It is used to name of the waf policy.. The parameter '--resource-group -g' is required. It is used to name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--custom-block-response-body' is optional. body to return for blocked requests.. The parameter '--custom-block-response-status-code' is optional. http status to return for blocked requests.. The parameter '--disabled' is optional. create in a disabled state.. The parameter '--mode' is optional. firewall policy mode.. The parameter '--redirect-url' is optional. url used for redirect rule action.. The parameter '--request-body-check' is optional. disabled or enabled status. default value is disabled.. The parameter '--sku' is optional. sku of firewall policy. this field cannot be updated after creation. default value is classic_azurefrontdoor.. The parameter '--tags' is optional. space-separated tags: key[=value] [key[=value] ...]. use "" to clear existing tags.. 