fleet/terraform/addons/waf-alb
Zachary Winnerman 3a43c1ebc2
Add waf to dogfood (#11541)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).

Closes #10716
2023-05-05 12:06:16 -04:00
..
.header.md Add waf to dogfood (#11541) 2023-05-05 12:06:16 -04:00
.terraform-docs.yml Add waf to dogfood (#11541) 2023-05-05 12:06:16 -04:00
main.tf Add waf to dogfood (#11541) 2023-05-05 12:06:16 -04:00
outputs.tf Add waf to dogfood (#11541) 2023-05-05 12:06:16 -04:00
README.md Add waf to dogfood (#11541) 2023-05-05 12:06:16 -04:00
variables.tf Add waf to dogfood (#11541) 2023-05-05 12:06:16 -04:00

WAF for ALB addon

This addon creates and manages WAF attached to an ALB

Requirements

No requirements.

Providers

Name Version
aws n/a

Modules

No modules.

Resources

Name Type
aws_wafv2_ip_set.main resource
aws_wafv2_rule_group.main resource
aws_wafv2_web_acl.main resource
aws_wafv2_web_acl_association.main resource

Inputs

Name Description Type Default Required
blocked_addresses n/a list(string) [] no
blocked_countries n/a list(string)
[
"BI",
"BY",
"CD",
"CF",
"CU",
"IQ",
"IR",
"LB",
"LY",
"SD",
"SO",
"SS",
"SY",
"VE",
"ZW",
"RU"
]
no
lb_arn n/a any n/a yes
name n/a any n/a yes

Outputs

No outputs.