URL evasion defense

akamai_appsec_advanced_settings_url_evasion_defense

Get your security configuration's URL evasion defense settings.

data "akamai_appsec_advanced_settings_url_evasion_defense" "my_url_evasion_settings" {
  config_id = 12345
}

output "my_url_evasion_settings" {
  value = data.akamai_appsec_advanced_settings_url_evasion_defense.my_url_evasion_settings
}
my_url_evasion_settings = {
  bypass_lists = [
    "123456_BYPASSLIST"
  ],
  config_id    = 12345
  status       = "disabled"
  rules        = tolist([
    {
      "rule_id" = 12345
      "action" = "deny"
      "condition_operator" = "AND"
      "conditions" = [
        {
          "type" = "hostMatch"
          "hosts" = [
            "host.name"
          ]
          "positive_match" = true
        }
      ]
    }
  ],
}

Argument

Provide a security configuration ID value for config_id in your data block.

Attributes

Returned to you are your URL evasion rule settings.

AttributeDescription
config_idYour security configuration's ID.
bypass_listsA list of clients that are exempt from URL evasion mitigation rules.
statusYour security configuration's URL evasion defense enablement state. Value is either enabled or disabled.
rulesThe settings for your URL evasion rules. Contains:
  • action. The action taken on trigger of your URL evasion rule. Possible values:
    • alert
    • deny
    • none
  • condition_operator. How the rule evaluates conditions. Possible values:
    • OR to match any condition.
    • AND to match on all conditions.
  • conditions. A list of the rule's match conditions.
    • type. The condition on which to match.
    • client_lists. The client lists that trigger the clientListMatch condition type.
    • extensions. The file extensions that trigger the extensionMatch condition type.
    • filenames. The file names that trigger the filenameMatch condition type.
    • header. The request headers that trigger the requestHeaderMatch condition type.
    • hosts. The hostnames that trigger the hostMatch condition type.
    • ips. The IPs that trigger the ipMatch condition type.
    • methods. The HTTP request methods that trigger the requestMethodMatch condition type. Possible values:
      • GET
      • POST
      • HEAD
      • PUT
      • DELETE
      • OPTIONS
      • TRACE
      • CONNECT
      • PATCH
    • name. The query parameter name that triggers the uriQueryMatch condition type.
    • name_case_sensitive. When set to true, the value for is case sensitive.
    • paths. The paths that trigger the pathMatch condition type.
    • positive_match. When set to true, the condition triggers on a match, and if set to false, the condition triggers on the lack of a match.
    • use_headers. When set to true, the ipMatch and clientListMatch condition types include the X-Forwarded-For.
    • value. The query parameter or request header value that trigger the uriQueryMatch or requestHeaderMatch condition type.
    • value_case_sensitive. When set to true, the value for value is case sensitive.
    • value_wildcard. When set to true, the value for value is a wildcard.
  • description. A human-readable statement about your URL evasion rule.
  • name. The name of your URL evasion rule.
  • rule_id. Your rule's ID.

Did this page help you?