---
updatedAt: 2026-03-01T18:28:45.000Z
agentTools:
  siteIndex: https://techdocs.akamai.com/llms.txt
  projectIndex: https://techdocs.akamai.com/terraform/v9.3/llms.txt
---

# IP Geo

akamai_appsec_ip_geo

Create, update, or delete the IP/Geo settings for your network and client lists. To delete your settings, run `terraform destroy`.

```json Declaration
resource "akamai_appsec_ip_geo" "my_ip_geo_settings" {
  config_id                  = 12345
  security_policy_id         = "abc1_234567"
  mode                       = "block"
  asn_controls {
    action       			= "deny"
    asn_network_lists = ["78901_ASNLIST1", "76543_ASNLIST2"]
  }
  geo_controls {
    action            = "deny"
    geo_network_lists = ["12345_EMEAALLOW1", "23456_EMEAALLOW2"]
  }
  ip_controls {
    action           = "deny"
    ip_network_lists = ["98765_IPALLOWLIST1", "87654_IPALLOWLIST1"]
  }
}
```
```json Output
my_ip_geo_settings = {
  asn_controls               = [
    {
      action            = "deny"
      asn_network_lists = ["78901_ASNLIST1", "76543_ASNLIST2"]
    },
  ]
  block_action               = null
  config_id                  = 12345
  exception_ip_network_lists = []
  geo_controls               = [
    {
      action            = "deny"
      geo_network_lists = ["12345_EMEAALLOW1", "23456_EMEAALLOW2"]
    },
  ]
  id                         = "12345"
  ip_controls                = [
    {
      action           = ""
      ip_network_lists = ["98765_IPALLOWLIST1", "87654_IPALLOWLIST1"]
    },
  ]
  mode                       = "block"
  security_policy_id         = "abcd_123456"
  ukraine_geo_control_action = "alert"
}
```

## Arguments

Pass your config and security policy IDs along with the firewall action `mode` to create or update your IP/GEO settings.

[block:parameters]
{
  "data": {
    "h-0": "Attribute",
    "h-1": "Required",
    "h-2": "Description",
    "0-0": "`config_id`",
    "0-1": "✔️",
    "0-2": "Your security configuration's ID.",
    "1-0": "`security_policy_id`",
    "1-1": "✔️",
    "1-2": "Your security policy ID.",
    "2-0": "`mode`",
    "2-1": "✔️",
    "2-2": "The IP/Geo firewall actions. Possible values are:<ul><li><code>block</code>.  Prevents networks on the IP and geographic network lists from passing through the firewall.</li><li><code>allow</code>. Allows networks on the IP and geographic network to pass through the firewall.</li></ul>",
    "3-0": "`asn_controls`",
    "3-1": "",
    "3-2": "An object that details the action and which lists to apply the action to.<ul><li><code>asn_network_lists</code>. A list of your ASN network or client lists.</li><li><code>action</code>. The action to take against the given lists. Possible values are: <ul><li><code> deny</code>. Default. Blocked traffic gets a 403 response.</li><li><code>deny_custom\\_{custom_deny_id}</code>. Blocked traffic gets a customized deny response.</li></ul></li></ul>",
    "4-0": "`geo_controls`",
    "4-1": "",
    "4-2": "An object that details the action and which lists to apply the action to.<ul><li><code>geo_network_lists</code>. A list of your Geo network or client lists.</li><li><code>action</code>. The action to take against the given lists.Possible values are: <ul><li><code> deny</code>. Default. Blocked traffic gets a 403 response.</li><li><code>deny_custom\\_{custom_deny_id}</code>. Blocked traffic gets a customized deny response.</li></ul></li></ul>",
    "5-0": "`ip_controls`",
    "5-1": "",
    "5-2": "An object that details the action and which lists to apply the action to.<ul><li><code>ip_network_lists</code>. A list of your IP network or client lists.</li><li><code>action</code>. The action to take against the given lists.Possible values are: <ul><li><code> deny</code>. Default. Blocked traffic gets a 403 response.</li><li><code>deny_custom\\_{custom_deny_id}</code>. Blocked traffic gets a customized deny response.</li></ul></li></ul>",
    "6-0": "`ukraine_geo_control_action`",
    "6-1": "",
    "6-2": "The action settings for Ukraine Geo control. Possible values are:<ul><li><code>alert</code></li><li><code>deny</code></li><li><code>none</code></li></ul>",
    "7-0": "`exception_ip_network_lists`",
    "7-1": "",
    "7-2": "A list of network or client lists allowed through the firewall regardless of the values assigned to `mode`, `geo_network_lists`, and `ip_network_lists`.",
    "8-0": "`block_action`",
    "8-1": "",
    "8-2": "Prevents or allows requests by IP and geographic location. Possible values are:<ul><li><code>block_specific_ip_geo</code>. Blocks traffic based on the values in your allowed, blocked, and Ukraine control network lists.</li><li><code>block_all_traffic_except_allowed_ips</code>. Blocks all traffic except the values in your allowed network lists.</li></ul>"
  },
  "cols": 3,
  "rows": 9,
  "align": [
    null,
    "center",
    null
  ]
}
[/block]

## Attributes

There is no standard output for this resource as changes that mirror your request are reflected in your state file.

> **Note:** There is an `id` attribute returned. It is an ID for the run of the resource and is not needed downstream anywhere.

# Sibling pages

* [AAP selected hostnames](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-aap-selected-hostnames.md)
* [Activations](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-activations.md)
* [Advanced logging](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-advanced-logging.md)
* [API constraints protection](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-api-constraints-protection.md)
* [API request constraints](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-api-request-constraints.md)
* [ASE penalty box settings](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-ase-penalty-box-settings.md)
* [Attack group](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-attack-group.md)
* [Attack payload logging](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-attack-payload-logging.md)
* [Bypass network lists](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-bypass-network-lists.md)
* [Configuration](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-configuration.md)
* [Configuration rename](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-configuration-rename.md)
* [Custom deny](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-custom-deny.md)
* [Custom rule](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-custom-rule.md)
* [Custom rule action](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-custom-rule-action.md)
* [Eval](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-eval.md)
* [Eval group](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-eval-group.md)
* [Eval penalty box](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-eval-penalty-box.md)
* [Eval penalty box conditions](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-eval-penalty-box-conditions.md)
* [Eval rule](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-eval-rule.md)
* [Evasive path match](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-evasive-path-match.md)
* [IP Geo protection](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-ip-geo-protection.md)
* [JA4 fingerprint](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-ja4-fingerprint.md)
* [Match target sequence](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-match-target-sequence.md)
* [Malware policy](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-malware-policy.md)
* [Malware policy action](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-malware-policy-action.md)
* [Malware policy actions](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-malware-policy-actions.md)
* [Malware protection](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-malware-protection.md)
* [Match target](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-match-target.md)
* [Penalty box](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-penalty-box.md)
* [Penalty box conditions](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-penalty-box-conditions.md)
* [PII learning](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-pii-learning.md)
* [Policy rename](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-policy-rename.md)
* [Pragma header](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-pragma-header.md)
* [Prefetch](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-prefetch.md)
* [Rapid rules](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-rapid-rules.md)
* [Rate policy](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-rate-policy.md)
* [Rate policy action](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-rate-policy-action.md)
* [Rate protection](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-rate-protection.md)
* [Reputation profile](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-reputation-profile.md)
* [Reputation profile action](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-reputation-profile-action.md)
* [Reputation profile analysis](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-reputation-analysis.md)
* [Reputation protection](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-reputation-protection.md)
* [Request body settings](https://techdocs.akamai.com/terraform/v9.3/docs/request-body-settings.md)
* [Rule](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-rule.md)
* [Rule upgrade](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-rule-upgrade.md)
* [Security policy](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-security-policy.md)
* [Security policy default protections](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-security-policy-default-protections.md)
* [SIEM settings](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-siem-settings.md)
* [Slow POST](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-slow-post.md)
* [Slow POST protection](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-slow-post-protection.md)
* [Threat intel](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-threat-intel.md)
* [Version notes](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-version-notes.md)
* [WAF mode](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-waf-mode.md)
* [WAF protections](https://techdocs.akamai.com/terraform/v9.3/docs/as-rc-waf-protections.md)