} Binbash Leverage | DevOps Automation Code Library integration

Rule_blacklisted_ips_action_type = 'COUNT ' Source = ':binbashar/terraform-aws-owasp.git//modules/waf-global?ref=v1.0.4 ' # Just a prefix to add some level of organization Rule_blacklisted_ips_action_type = 'COUNT ' # Set custom header for CSRF Token Rule_php_insecurities_action_type = 'COUNT ' Rule_size_restriction_action_type = 'COUNT ' # By default seted to COUNT for testing in order to avoid service affection when ready, set it to BLOCK

(For example, an Application Load Balancer or API Gateway Stage.) # Pass the list of resources ARNs that the WAF ACL will be connected to. # List of IPs that are allowed to access admin pages Waf_prefix = 'test ' # List of IPs that are blacklisted

Source = ':binbashar/terraform-aws-owasp.git//modules/waf-regional?ref=v1.0.4 ' # Just a prefix to add some level of organization This module is based on the whitepaper that AWS provides. This is a Terraform module which creates AWF WAF resources for protection of your resources from the OWASP Top 10 You can read the document that they published here. Project members include a variety of security experts from around the world who have shared their expertise to It represents a broad consensus about the most critical security risks to web applications. OWASP Top 10 Most Critical Web Application Security Risks is a powerful awareness document for webĪpplication security. Use AWS WAF at terraform to Mitigate OWASP’s Top 10 Web Application Vulnerabilities Versions: = 1.x.y (Terraform 0.12.x compatible)

Regional WAF for Regional/ALB and/or API Gateway Stage usage.

The original source was taken from and was adapted to the needs of the project at hand. Terraform | AWS WAF | OWASP Top 10 vulnerabilitiesĭEPRECATION NOTICE: This module will be not longer maintain because there are other Terraform modules that support these features based on ´wafv2´ Managed rules for AWS Web Application Firewall terraform-aws-waf-owasp IMPORTANT CONSIDERATIONS

Terraform aws waf