Create or update your security configuration's URL evasion defense enablement and other settings.
Declaration
resource "akamai_appsec_advanced_settings_url_evasion_defense" "my_url_evasion_settings" {
config_id = 12345
status = "enabled"
bypass_lists = [
"123456_BYPASSLIST"
]
rules = [
{
rule_id = 12345
action = "deny"
condition_operator = "AND"
conditions = [
{
type = "hostMatch"
hosts = [
"host.name"
]
positive_match = true
}
]
}
]
}Provide a security configuration ID and an enablement status to manage your URL evasion defense settings.
Argument Required Description config_id✔️ Your security configuration's ID. status✔️ Your security configuration's URL evasion defense enablement state. Value is either enabled or disabled. bypass_listsA list of clients that are exempt from URL evasion mitigation rules. rulesThe settings for your URL evasion rules. Contains:action. Required. The action taken on trigger of your URL evasion rule. Value is one of:condition_operator. How the rule evaluates conditions. Value is one of:OR to match any condition.AND to match on all conditions.conditions. A list of the rule's match conditions.type. Required. The condition on which to match.client_lists. The client lists that trigger the clientListMatch condition type.extensions. The file extensions that trigger the extensionMatch condition type.filenames. The file names that trigger the filenameMatch condition type.header. The request headers that trigger the requestHeaderMatch condition type.hosts. The hostnames that trigger the hostMatch condition type.ips. The IPs that trigger the ipMatch condition type.methods. The HTTP request methods that trigger the requestMethodMatch condition type. Value is one of:name. The query parameter name that triggers the uriQueryMatch condition type.name_case_sensitive. When set to true, the value for is case sensitive. paths. The paths that trigger the pathMatch condition type.positive_match. When set to true, the condition triggers on a match, and if set to false, the condition triggers on the lack of a match.use_headers. When set to true, the ipMatch and clientListMatch condition types include the X-Forwarded-For.value. The query parameter or request header value that trigger the uriQueryMatch or requestHeaderMatch condition type.value_case_sensitive. When set to true, the value for value is case sensitive.value_wildcard. When set to true, the value for value is a wildcard.description. A human-readable statement about your URL evasion rule.name. The name of your URL evasion rule.rule_id. Required. Your rule's ID.
Returned to is a list of your rules names and descriptions.
Attribute Description descriptionThe human-readable statement about your URL evasion rule. nameThe name of your URL evasion rule.
