Application Gateway WAF custom block responses shipped 24 August 2026 with no documented code list
Azure Application Gateway WAF can now return a custom status code and body instead of a bare 403. The announcement claims parity with Front Door, but only Front Door publishes the five permitted codes.