Eval group

Returns the action and the condition-exception information for an evaluation attack group or collection of groups.

Note: This data source requires your account uses Adaptive Security Engine.

data "akamai_appsec_eval_groups" "test" {
  config_id          = 12345
  security_policy_id = "ABCD_12345"
  attack_group       = "SQL"
}

Argument reference

This data source supports the following arguments:

• config_id (Required). Unique identifier of the security configuration associated with the evaluation attack group.
• security_policy_id (Required). Unique identifier of the security policy associated with the evaluation attack group.
• attack_group (Optional). Unique identifier of the evaluation attack group you want to return information for. If not included, information is returned for all your evaluation attack groups.

Output options

The following options can be used to determine the information returned, and how that returned information is formatted:

• attack_group_action. Action taken anytime the attack group is triggered.

  • alert. Record the event.
  • deny. Block the request.
  • denycustom{custom_deny_id}. The action defined by the custom deny is taken.
  • none. Take no action.

• condition_exception. Conditions and exceptions associated with the attack group.

• json. JSON-formatted list of the action and the condition-exception information for the specified attack group. This option is only available if the attack_group argument is included in the Terraform configuration.

• output_text. Tabular report showing the attack group's action as well as Boolean values indicating whether conditions and exceptions have been configured for the group.