Penalty box

Returns penalty box settings for the specified security policy.
When the penalty box is enabled for a policy, clients that trigger a WAF Deny action are placed in the “penalty box”.

There, the action you select for penalty box (either Alert or Deny ) continues to apply to any requests from that client for the next 10 minutes.

Scopes: Security policy

Example

terraform {
  required_providers {
    akamai = {
      source = "akamai/akamai"
    }
  }
}

provider "akamai" {
  edgerc = "~/.edgerc"
}

// USE CASE: User wants to view penalty box settings.

data "akamai_appsec_configuration" "configuration" {
  name = "Documentation"
}
data "akamai_appsec_penalty_box" "penalty_box" {
  config_id          = data.akamai_appsec_configuration.configuration.config_id
  security_policy_id = "gms1_134637"
}

output "penalty_box_action" {
  value = data.akamai_appsec_penalty_box.penalty_box.action
}

output "penalty_box_enabled" {
  value = data.akamai_appsec_penalty_box.penalty_box.enabled
}

output "penalty_box_text" {
  value = data.akamai_appsec_penalty_box.penalty_box.output_text
}

Argument reference

This data source supports the following arguments:

• config_id (Required). Unique identifier of the security configuration associated with the penalty box settings.
• security_policy_id (Required). Unique identifier of the security policy associated with the penalty box settings.

Output options

The following options can be used to determine the information returned, and how that returned information is formatted:

• action. Action taken any time the penalty box is triggered.

  • alert. Record the event.
  • deny. The request is blocked.
  • denycustom{custom_deny_id}. The action defined by the custom deny is taken.
  • none. Take no action.

• enabled. If true, penalty box protection is enabled. If false, penalty box protection is disabled.

• output_text. Tabular report of penalty box protection settings.