IaC Bazaar
AkamaiPlan-validated

Akamai App & API Protector (WAF)

Security configuration with policy, WAF mode, match targets, rate controls, and IP/geo blocking, activated to staging or production.

terraformEdge & DNS#akamai
akamai-appsec-wafterraform v1.7

Verification

Plan-validated

Passed: module logic verified on a mocked plan - inputs, validation rules, conditional creation and outputs resolve (no real provider, no cloud).

Conformance

  • Static validation (fmt · validate · tflint)
  • Security scan: findings disclosed (Checkov)
  • Plan tests (mocked: validation rules · outputs)

Provenance

Functional

  • Live test pending (no cloud run yet)

Last verified 2026-06-28 · how we verify

Verify this download

cosign · sha-256

Don't take our word for it. Every release is signed with cosign - check the bytes against our pinned public key before you trust them.

# 1. Our pinned public key - fetch once, trust out-of-band
curl -O https://www.iac-bazaar.com/cosign.pub

# 2. This module's Sigstore bundle
curl -o akamai-appsec-waf-1.0.0.sigstore.json \
  https://www.iac-bazaar.com/api/artifacts/akamai-appsec-waf/signature

# 3. Verify the tarball you downloaded
cosign verify-blob \
  --key cosign.pub \
  --bundle akamai-appsec-waf-1.0.0.sigstore.json \
  akamai-appsec-waf-1.0.0.tar.gz
# → Verified OK

# 4. (optional) confirm the checksum too
echo "0b6a2ec5df5e409eae72cf4d122ca28bd314dc72ff4d50d4b279bda907a67546  akamai-appsec-waf-1.0.0.tar.gz" | sha256sum -c
Signature bundlePublic keyMachine-readable receiptHow we verify

Use it from the registry

terraform · opentofu
module "appsec_waf" {
  source  = "www.iac-bazaar.com/iac-bazaar/akamai-appsec-waf/akamai"
  version = "1.0.0"
}

Paid module — needs a purchase (or a subscription that covers it) plus a registry token from /account/tokens. Full setup: registry docs.

Inputs & outputs

Create a free account to read this module's contract

The declared contract — every input name, type, default and description, plus every output — is shown to signed-in accounts, not to anonymous visitors.

A free account sees the contract of every Free module. This one is Professional, so its contract unlocks when you buy it.

Create a free account →Sign in

Documentation

akamai-appsec-waf

Akamai App & API Protector (WAF) baseline in one module: security configuration, policy with Akamai's recommended defaults, adaptive WAF mode, website match target, rate controls, optional IP/geo/ASN firewall, and staging/production activation. Works with Terraform and OpenTofu (>= 1.6), Akamai provider >= 10.0, < 11.0.

Secure defaults:

  • Security policy created with default_settings = true (Akamai recommended protections)
  • WAF protection enabled, rules in ASE_AUTO (adaptive) mode — Akamai keeps rule actions current
  • Match target covers all listed hostnames on /*
  • A conservative alert-only rate-control spike detector ships enabled, so you observe before you deny

License

Commercial — IaC Bazaar EULA. © IaC Bazaar. Original work (not derived from a third-party module).

Usage code & full reference unlock after purchase

The complete copy-paste usage, the full input/output reference, and operational notes ship with your licence - shown here and bundled in the download.

  • Usage
  • Inputs
  • Outputs

Related modules

Akamai✓ live-tested

Akamai Network Lists

Versioned IP and geo block/allow lists with activation, ready to feed WAF policies and property rules.

$29.00v1.0.2