This project is a Terraform module for AWS Web Application Firewall.

Please read our LICENSE, CONTRIBUTING, and CHANGES documents before working in this project and anytime they are updated.

The Web Application Firewal (WAF) is an important tool for providing services over the internet in a secure way.

This module manages WAF rules for ip_blacklist, ip_whitelist, and redirects.

The ip_blacklist takes precidence. Any address matching that rule is blocked regardless of how it would be considered in the context of the ip_whitelist. For simple sites without strict security rules an initial depoyment with the default value will be not blacklist any address.

The ip_whitelist allows non blacklisted addresses to be granted access to the site. If the first entry of the list is the default of 0.0.0.0/0 then all addresses are allowed.

The redirects map provides a way to send 301 redirects for a map of path strings.

The name and tags for AWS resources are managed by this module such that the WAF will have a unique name that includes the prefix input. Input tags are ammended with information about this module's version and the set of tags are applied to resources.