Akamai EdgeWorker with EdgeKV

akamai-edgeworker

Status: static-validated, live-test pending. This module ships under live-test quarantine: it passes tofu fmt, tofu validate, and tflint, but a real apply → verify → destroy cycle has not yet run (no Akamai sandbox account in CI). Treat the resource graph as reviewed-but-unproven against a live tenant.

Deploy JavaScript at the edge on Akamai EdgeWorkers, with bundle versioning, an optional EdgeKV namespace for low-latency key/value reads, and a guarded network activation — in one module. Works with Terraform and OpenTofu (>= 1.6), Akamai provider >= 10.0, < 11.0.

What you get:

• An akamai_edgeworker tied to your group and resource tier, with the code bundle (built outside Terraform as a .tgz) tracked by hash so a changed bundle produces a new version.
• A guarded akamai_edgeworkers_activation that defaults to STAGING — promote to production only after verification. Activation is automatically skipped unless a bundle is present (enforced by a precondition).
• An optional akamai_edgekv namespace plus seeded akamai_edgekv_group_items, with production data residency (US/EU/JP) wired through.

Secure defaults

• Staging-first activation. activation_network defaults to STAGING; you must explicitly opt into PRODUCTION.
• No silent half-deploys. A precondition fails the plan if activate = true but no local_bundle is supplied, so you never "activate" an empty version.
• No secrets at the edge. edgekv_items is plaintext key/value storage; the variable docs and this README state it is for non-secret data (flags, routing hints) only. Keep credentials in a real secrets store and inject at request time.
• Initial revision pinned. auto_pin defaults to true (Akamai's safe default) so the activated revision is locked unless you deliberately opt out.
• Sane retention. EdgeKV retention is validated to be 0 (indefinite) or at least one day, preventing accidental sub-day expiry.

Provider

akamai = {
  source  = "akamai/akamai"
  version = ">= 10.0, < 11.0"
}

License

Commercial — LicenseRef-IaCBazaar-Commercial.