generated from woodonggyu/repo-template
-
Notifications
You must be signed in to change notification settings - Fork 4
/
variables.tf
108 lines (94 loc) · 2.95 KB
/
variables.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
variable "region" {
type = string
description = "The Region of the AWS."
default = "ap-northeast-2"
}
variable "name" {
type = string
description = "A friendly name of the WebACL."
}
variable "description" {
type = string
description = "A friendly description of the WebACL."
default = null
}
variable "scope" {
type = string
description = "Specifies whether this is for an AWS CloudFront distribution or for a regional application."
}
variable "default_action" {
type = string
description = "The action to perform when a web request doesn't match any of the rules in the WebACL."
default = "allow"
}
variable "visibility_config" {
type = object({
# A boolean indicating whether the associated resource sends metrics to CloudWatch.
cloudwatch_metrics_enabled = bool
# A friendly name of the CloudWatch metric
metric_name = string
# A boolean indicating whether AWS WAF should store a sampling of the web requests that match the rules.
sampled_requests_enabled = bool
})
description = "Defines and enables Amazon CloudWatch metrics and web request sample collection."
default = {
cloudwatch_metrics_enabled = false
metric_name = "cloudwatch-wafv2-metrics"
sampled_requests_enabled = false
}
}
variable "rules" {
type = any
description = "The processing guidance for a Rule, used by AWS WAF to determine whether a web request matches the rule."
default = []
}
variable "tags" {
type = map(string)
description = "A tag associated with an AWS resource."
default = null
}
variable "enable_logging_configuration" {
type = bool
description = "Whether to enable logging configuration"
default = false
}
variable "log_destination_configs" {
type = list(string)
description = "The Amazon Resource Names (ARNs) of the logging destinations that you want to associate with the web ACL."
default = []
}
variable "redacted_fields" {
type = object({
single_header = map(string)
method = string
query_string = string
uri_path = string
})
description = "The parts of the request that you want to keep out of the logs."
default = null
}
variable "logging_filter" {
type = object({
default_behavior = string
filter = list(object({
behavior = string
condition = list(object({
action_condition = map(string)
label_name_condition = map(string)
}))
requirement = string
}))
})
description = "Filtering that specifies which web requests are kept in the logs and which are dropped."
default = null
}
variable "enable_webacl_association" {
type = bool
description = "Whether to associate ALB with WAFv2 WebACL."
default = false
}
variable "alb_resource_arn" {
type = list(string)
description = "The Amazon Resource Name (ARN) of the resource to associate with the web ACL."
default = []
}