WAF mode

akamai_appsec_waf_mode

Get a Kona Rule Set's update mode settings for a security policy.

data "akamai_appsec_waf_mode" "my_waf_mode" {
  config_id          = 12345
  security_policy_id = "abc1_234567"
}

output "waf_mode_mode" {
  value = data.akamai_appsec_waf_mode.my_waf_mode
}

Changes to Outputs:
  + waf_mode_mode = {
      + config_id            = 12345
      + current_ruleset      = "ASE Automatic (Dec 14, 2025)"
      + eval_expiration_date = ""
      + eval_ruleset         = ""
      + eval_status          = "disabled"
      + id                   = "12345"
      + json                 = jsonencode(
            {
              + current = "ASE Automatic (Dec 14, 2025)"
              + eval    = "disabled"
              + mode    = "ASE_AUTO"
            }
        )
      + mode                 = "ASE_AUTO"
      + output_text          = <<-EOT
            +---------------------------------------------+
            | wafMode                                     |
            +-----------------------+----------+----------+
            | CURRENT               | MODE     | EVAL     |
            +-----------------------+----------+----------+
            | ASE Automatic (Dec 14 |          |          |
            |  2025)                | ASE_AUTO | disabled |
            +-----------------------+----------+----------+
        EOT
      + security_policy_id   = "abc1_23456"
    }

Arguments

Provide both a security configuration and security policy ID to get information about your Kona Rule Set update settings.

Argument	Required	Description
`config_id`	✔️	A security configuration ID.
`security_policy_id`	✔️	A security policy ID.

Attributes

Returned to you are your Kona Rule Set update settings.

Attribute	Description
`mode`	The setting for the rule updates. Value is one of: `KRS`. Updated manually. `AAG`. Updated automatically. `ASE_AUTO` Automatic updates when using the Adaptive Security Engine. `ASE_MANUAL`. Manual updates for Adaptive Security Engine.
`current_ruleset`	The current ruleset version and the ISO 8601 date the version was introduced.
`eval_status`	Whether evaluation mode is enabled or disabled.
`eval_ruleset`	The evaluation ruleset version and the ISO 8601 date the evaluation began.
`eval_expiration_date`	The ISO 8601 timestamp indicating when evaluation mode expires.
`output_text`	Tabular report of the mode information.
`json`	JSON-formatted list of the mode information.

Updated about 1 month ago