Terraform resource: aws wafv2 web acl

aws_wafv2_web_acl (doc)

Official example

resource "aws_wafv2_web_acl" "example" {
 name        = "managed-rule-example"
 description = "Example of a managed rule."
 scope       = "REGIONAL"

 default_action {
   allow {}
 }

 rule {
   name     = "rule-1"
   priority = 1

   override_action {
     count {}
   }

   statement {
     managed_rule_group_statement {
       name        = "AWSManagedRulesCommonRuleSet"
       vendor_name = "AWS"

       rule_action_override {
         action_to_use {
           count {}
         }

         name = "SizeRestrictions_QUERYSTRING"
       }

       rule_action_override {
         action_to_use {
           count {}
         }

         name = "NoUserAgent_HEADER"
       }

       scope_down_statement {
         geo_match_statement {
           country_codes = ["US", "NL"]
         }
       }
     }
   }

   visibility_config {
     cloudwatch_metrics_enabled = false
     metric_name                = "friendly-rule-metric-name"
     sampled_requests_enabled   = false
   }
 }

 tags = {
   Tag1 = "Value1"
   Tag2 = "Value2"
 }

 token_domains = ["mywebsite.com", "myotherwebsite.com"]

 visibility_config {
   cloudwatch_metrics_enabled = false
   metric_name                = "friendly-metric-name"
   sampled_requests_enabled   = false
 }
}

Related terms

• AWS WAF: web ACLs

See also

• AWS WAF: aws wafv2 [create-web-acl, get-web-acl | list-web-acls | check-capacity ]
• Terraform WAF: aws_wafv2_web_acl, aws_wafv2_ip_set, aws_wafv2_regex_pattern_set, aws_wafv2_rule_group, aws_wafv2_web_acl, aws_wafv2_web_acl_association, aws_wafv2_web_acl_logging_configuration