IP geo
akamai_appsec_ip_geo
Returns information about the network lists used in the IP/Geo Firewall settings; also returns the firewall mode
, which indicates whether devices on the geographic or IP address lists are allowed through the firewall or are blocked by the firewall.
Scopes: Security configuration; security policy
Example
terraform {
required_providers {
akamai = {
source = "akamai/akamai"
}
}
}
provider "akamai" {
edgerc = "~/.edgerc"
}
data "akamai_appsec_configuration" "configuration" {
name = "Documentation"
}
// USE CASE: User wants to view IP/Geo firewall settings.
data "akamai_appsec_ip_geo" "ip_geo" {
config_id = data.akamai_appsec_configuration.configuration.config_id
security_policy_id = "gms1_134637"
}
output "ip_geo_mode" {
value = data.akamai_appsec_ip_geo.ip_geo.mode
}
output "geo_network_lists" {
value = data.akamai_appsec_ip_geo.ip_geo.geo_network_lists
}
output "ip_network_lists" {
value = data.akamai_appsec_ip_geo.ip_geo.ip_network_lists
}
output "exception_ip_network_lists" {
value = data.akamai_appsec_ip_geo.ip_geo.exception_ip_network_lists
}
Argument reference
This data source supports the following arguments:
config_id
. Required. Unique identifier of the security configuration associated with the IP/Geo lists.security_policy_id
. Required. Unique identifier of the security policy associated with the IP/Geo lists. If not included, information is returned for all your security policies.ukraine_geo_control_action
. Optional. Sets a block or allow for traffic coming from a specific IP, subnet, or geographic area. Values arealert
,deny
, ordone
.
Attributes
Returned are details about your available network lists by type.
-
mode
. Specifies the action taken by the IP/Geo firewall.- block. Networks on the IP and geographic network lists are prevented from passing through the firewall.
- allow. Networks on the IP and geographic network lists are allowed to pass through the firewall.
-
asn_network_lists
. A list of available ASN network or client lists. -
geo_network_lists
. A list of available GEO network or client lists. -
ip_network_lists
. A list of available IP network or client lists. -
exception_ip_network_lists
. Network or client lists allowed through the firewall regardless of the values assigned to themode
,geo_network_lists
, andip_network_lists
parameters. -
ukraine_geo_control_action
. The Ukraine specific block or allow settings for traffic coming from a specific IP, subnet, or geographic area.
Updated 3 months ago