bug(azure): waf is disabled for Azure Application Gateway while a WAF strategy is attached to my AG

[HujinoKun]

Hello,

When I run a scan with kics, it tells me that I'm not using WAF even though I'm using azurerm_web_application_firewall_policy from Terraform which is attached to my AG instance :

resource "azurerm_web_application_firewall_policy" "waf_policy" {
  name                = "waf-policy"
  resource_group_name = var.resource_group_name
  location            = var.resource_group_location

  policy_settings {
    enabled                     = true
    mode                        = "Detection"
    request_body_check          = true
    file_upload_limit_in_mb     = 500
    max_request_body_size_in_kb = 256
  }

  ## Example of managed rules
  managed_rules {
    managed_rule_set {
      type    = "OWASP"
      version = "3.2"
    }
  }
}

resource "azurerm_application_gateway" "ag_aks" {
  name                              = "ag-aks"
  resource_group_name               = var.resource_group_name
  location                          = var.resource_group_location
  firewall_policy_id                = azurerm_web_application_firewall_policy.waf_policy.id
  force_firewall_policy_association = true
  zones                             = [1, 2, 3]
  sku {
    name = "WAF_v2"
    tier = "WAF_v2"
  }
  [...]
}

Here's the alert that came up :

WAF Is Disabled For Azure Application Gateway, Severity: MEDIUM, Results: 1
Description: Check if Web Application Firewall is disabled or not configured for Azure's Application Gateway.
Platform: Terraform
CWE: 693
Learn more about this vulnerability: https://docs.kics.io/latest/queries/terraform-queries/azure/2e48d91c-50e4-45c8-9312-27b625868a72

	[1]: ../../path/main.tf:405

		404: 
		405: resource "azurerm_application_gateway" "ag_aks" {
		406:   name                              = "ag-aks"

URL : https://docs.kics.io/latest/queries/terraform-queries/azure/2e48d91c-50e4-45c8-9312-27b625868a72

Could you include this case in your detection, please?