WAF mode

akamai_appsec_waf_mode

Get a Kona Rule Set's update mode settings for a security policy.

data "akamai_appsec_waf_mode" "my_waf_mode" {
  config_id          = 12345
  security_policy_id = "abc1_234567"
}

output "waf_mode_mode" {
  value = data.akamai_appsec_waf_mode.my_waf_mode
}
Changes to Outputs:
  + waf_mode_mode = {
      + config_id            = 12345
      + current_ruleset      = "ASE Automatic (Dec 14, 2025)"
      + eval_expiration_date = ""
      + eval_ruleset         = ""
      + eval_status          = "disabled"
      + id                   = "12345"
      + json                 = jsonencode(
            {
              + current = "ASE Automatic (Dec 14, 2025)"
              + eval    = "disabled"
              + mode    = "ASE_AUTO"
            }
        )
      + mode                 = "ASE_AUTO"
      + output_text          = <<-EOT
            +---------------------------------------------+
            | wafMode                                     |
            +-----------------------+----------+----------+
            | CURRENT               | MODE     | EVAL     |
            +-----------------------+----------+----------+
            | ASE Automatic (Dec 14 |          |          |
            |  2025)                | ASE_AUTO | disabled |
            +-----------------------+----------+----------+
        EOT
      + security_policy_id   = "abc1_23456"
    }

Arguments

Provide both a security configuration and security policy ID to get information about your Kona Rule Set update settings.

ArgumentRequiredDescription
config_id✔️A security configuration ID.
security_policy_id✔️A security policy ID.

Attributes

Returned to you are your Kona Rule Set update settings.

AttributeDescription
modeThe setting for the rule updates. Value is one of:
  • KRS. Updated manually.
  • AAG. Updated automatically.
  • ASE_AUTO Automatic updates when using the Adaptive Security Engine.
  • ASE_MANUAL. Manual updates for Adaptive Security Engine.
current_rulesetThe current ruleset version and the ISO 8601 date the version was introduced.
eval_statusWhether evaluation mode is enabled or disabled.
eval_rulesetThe evaluation ruleset version and the ISO 8601 date the evaluation began.
eval_expiration_dateThe ISO 8601 timestamp indicating when evaluation mode expires.
output_textTabular report of the mode information.
jsonJSON-formatted list of the mode information.