Azure Front Door should use Web Application Firewall (WAF) in 'Detection' or 'Prevention' modes.
In Terraform -
For Azure Provider versions prior to v4.x (deprecated in favor of azurerm_cdn_frontdoor resources):
References:
https://learn.microsoft.com/en-us/azure/frontdoor/
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/frontdoor_firewall_policy