All Modules
AWSSecurity

WAF

WAFv2 Web ACL with managed rules, rate limiting, and IP allowlisting

Usage

module "waf" {
  source = "github.com/fencepencil/fencepencil-aws-modules//waf"

  name = "<name>"

  tags = var.tags
}

Inputs (7)

NameTypeDescriptionDefaultRequired
namestringName of the WAF Web ACLyes
scopestringScope (REGIONAL or CLOUDFRONT)REGIONALno
rate_limitnumberMax requests per 5 min per IP2000no
managed_ruleslist(object)AWS managed rule groups to attach[CommonRuleSet, KnownBadInputs, SQLi]no
associated_resource_arnslist(string)Resource ARNs to associate[]no
ip_allowlistlist(string)CIDRs to allowlist[]no
tagsmap(string)Tags to apply to all resources{}no

Outputs (3)

NameDescription
web_acl_arnARN of the WAF Web ACL
web_acl_idID of the WAF Web ACL
web_acl_capacityWCU capacity of the Web ACL

More AWS Modules

Browse our full library of AWS infrastructure modules.

View all AWS modules