api-gateway-waf
dod-iac/api-gateway-waf/aws
AWS WAF Regional Web ACL for use with AWS API Gateway REST API
Usage Creates an AWS WAF Regional Web ACL for use with AWS API Gateway REST API. This is a regional resource, so you must create the WAF in the same region as your API Gateway. ``hcl module "cloudfront_waf" { source = "dod-iac/api-gateway-waf/aws" name = format("app-%s-api-%s", var.application, var.environment) metric_name = format("app%sApi%s", title(var.application), title(var.environment)) allowed_hosts = [format("%s.execute-api.%s.amazonaws.com", aws_api_gateway_rest_api.main.id, data.aws_region.current.name)] tags = { Application = var.application Environment = var.environment Automation = "Terraform" } } ` You can then associate the WAF with a REST API stage using the aws_wafregional_web_acl_association terraform resource. If you are not using terraform to manage API Gateway stages,
| Name | Type | Description | Default |
|---|---|---|---|
| allowed_hosts | list(string) | List of allowed values for the host header. | required |
| name | string | The name or description of the web ACL. | required |
| metric_name | string | The name or description for the Amazon CloudWatch metric of this web ACL. | required |
| tags | map(string) | A mapping of tags to assign to the WAF Web ACL Resource and WAF Rules. | {} |
| aws_wafregional_byte_match_set_allowed_hosts_name | string | The name of the aws_wafregional_byte_match_set used by the rule used for filteri | "" |
| aws_wafregional_rule_allowed_hosts_name | string | The name of the rule used for filtering by host header. Defaults to "[name]-all | "" |
| aws_wafregional_rule_allowed_hosts_metric_name | string | The metric name of the rule used for filtering by host header. Defaults to "[me | "" |
web_acl_id — The ID of the WAF WebACL.Azure landing zones Terraform module
Terraform supermodule for the Terraform platform engineering for Azure
Terraform module to deploy landing zone subscriptions (and much more) in Azure
Terraform Module to define a consistent naming convention by (namespace, stage,