diff --git a/azurerm/internal/services/network/web_application_firewall_policy_resource.go b/azurerm/internal/services/network/web_application_firewall_policy_resource.go
index a3955c94e88f..1ae1fe8a9878 100644
--- a/azurerm/internal/services/network/web_application_firewall_policy_resource.go
+++ b/azurerm/internal/services/network/web_application_firewall_policy_resource.go
@@ -106,6 +106,7 @@ func resourceArmWebApplicationFirewallPolicy() *schema.Resource {
 										Required: true,
 										ValidateFunc: validation.StringInSlice([]string{
 											string(network.WebApplicationFirewallOperatorIPMatch),
+											string(network.WebApplicationFirewallOperatorGeoMatch),
 											string(network.WebApplicationFirewallOperatorEqual),
 											string(network.WebApplicationFirewallOperatorContains),
 											string(network.WebApplicationFirewallOperatorLessThan),