URL protection policy

akamai_appsec_url_protection_policy

📘
Beta
Hello. Just a note to let you know the underlying API on which this data source is built is general release and has been vetted, but because this is a new feature for our Terraform provider, we've given it beta label.
This status just means we've paused for a bit to get your feedback to make sure this data source works like you need and expect.

Get information about a protection policy.

data "akamai_appsec_url_protection_policy" "my_protection_policy" {
  config_id                = 12345
  url_protection_policy_id = 987654
}

output "my_protection_policy" {
  value = data.akamai_appsec_url_protection_policy.my_protection_policy
}

my_protection_policies = {
  config_id = 12345,
  url_protection_policies = [
    {
      api_definitions = null,
      bypass_conditions = null,
      config_id = 12345,
      create_date = "2026-03-18T17:21:05Z",
      created_by = "jsmith",
      description = null,
      hostname_paths = [
        {
          hostname = "my-url-protections-policy.com",
          paths = [
            "/*"
          ]
        }
      ],
      intelligent_load_shedding = null,
      max_rate_threshold = 50,
      name = "My URL protection policy2",
      update_date = "2026-03-18T17:21:05Z",
      updated_by = "jsmith",
      url_protection_policy_id = 789012,
      used = false
    }
  ]
}

Arguments

Send your security configuration ID along with the ID of the policy for which you want information.

Argument	Required	Description
`config_id`	✔️	Your security configuration's ID.
`url_protection_policy_id`	✔️	A URL protection policy's ID.

Attributes

Returned to you are details about your URL protection policy.

Attribute	Description
`name`	A URL protection policy's name.
`url_protection_policy_id`	A URL protection policy's ID.
`description`	A human-readable statement about the URL protection policy.
`bypass_conditions`	A list of bypass conditions for the URL protection policy. Contains: `type`. The type of condition. Value is either `RequestHeaderCondition` or `NetworkListCondition`. `names`. A list of header names used with `RequestHeaderCondition`. `name_wildcard`. When set to `true`, uses wildcard matching for header names. `values`. A list of values for the condition. `value_case_sensitive`. When set to `true`, uses case-sensitive value matching. `value_wildcard`. When set to `true`, uses wildcard matching for values.
`max_rate_threshold`	The maximum hits per second in any five-second interval.
`api_definitions`	A list of API endpoints on which to match incoming requests. Contains: `api_definition_id`. An API's ID. `defined_resources`. When set to `true`, matches on the resources added to your API definition. `resource_ids`. A list of resource IDs for an endpoint. `undefined_resources`. When set to `true`, matches on resources not added to your API definition.
`hostname_paths`	A list of hostnames on which to match and their path configurations. Contains: `hostname`. A hostname on which to match. `paths`. A list of paths associated with the hostname.
`intelligent_load_shedding`	Your load shedding configuration settings. Contains: `hits_per_sec`. The number of hits-per-second threshold. `categories`. The traffic categories on which to perform load shedding. Possible values are: `BOTS` `CLIENT_REPUTATIONS` `CLOUD_PROVIDERS` `PLATFORM_DDOS_INTELLIGENCE` `PROXIES` `TOR_EXIT_NODES` `custom_criteria`. Any custom criteria for load shedding. Contains: `type`. The custom criteria type. `list_ids`. A list of your client list IDs. `positive_match`. When set to `true`, sheds on a positive match.
`used`	When set to `true`, URL protections are active.
`create_date`	Creation date of the URL protection policy.
`created_by`	The name of the user who created the URL protection policy.
`update_date`	Date of the URL protection policy's last change.
`updated_by`	The name of the user who last changed the URL protection policy.

Updated 9 days ago