waf.tf 603 B

123456789101112131415
  1. module "waf" {
  2. source = "../../../submodules/wafv2"
  3. # Custom to resource
  4. allowed_ips = [ ] # bypasses filters, so should not be needed/used unless warranted
  5. additional_blocked_ips = [ ] # NOTE: There is a standard list in the submodule
  6. resource_arn = aws_lb.searchhead-alb.arn
  7. fqdns = keys(module.public_dns_record_cust-elb.forward) # first entry in list will be the WAF name
  8. # These are passed through and should be the same for module
  9. tags = merge(var.standard_tags, var.tags)
  10. aws_partition = var.aws_partition
  11. aws_region = var.aws_region
  12. aws_account_id = var.aws_account_id
  13. }