diff --git a/azurerm/internal/services/network/validate/web_application_firewall_policy.go b/azurerm/internal/services/network/validate/web_application_firewall_policy.go
index cf83b5fbaa8d..dc79d34147b6 100644
--- a/azurerm/internal/services/network/validate/web_application_firewall_policy.go
+++ b/azurerm/internal/services/network/validate/web_application_firewall_policy.go
@@ -36,6 +36,7 @@ var ValidateWebApplicationFirewallPolicyRuleSetVersion = validation.StringInSlic
 	"2.2.9",
 	"3.0",
 	"3.1",
+	"3.2",
 }, false)
 
 var ValidateWebApplicationFirewallPolicyRuleSetType = validation.StringInSlice([]string{
diff --git a/website/docs/r/web_application_firewall_policy.html.markdown b/website/docs/r/web_application_firewall_policy.html.markdown
index 3b3bfff486eb..67e83529796b 100644
--- a/website/docs/r/web_application_firewall_policy.html.markdown
+++ b/website/docs/r/web_application_firewall_policy.html.markdown
@@ -202,7 +202,7 @@ The `managed_rule_set` block supports the following:
 
 * `type` - (Optional) The rule set type. Possible values: `Microsoft_BotManagerRuleSet` and `OWASP`.
 
-* `version` - (Required) The rule set version. Possible values: `0.1`, `1.0`, `2.2.9`, `3.0` and `3.1`.
+* `version` - (Required) The rule set version. Possible values: `0.1`, `1.0`, `2.2.9`, `3.0`, `3.1` and `3.2`.
 
 * `rule_group_override` - (Optional) One or more `rule_group_override` block defined below.