IaC Bazaar
AkamaiLive-tested

Akamai Network Lists

Versioned IP and geo block/allow lists with activation, ready to feed WAF policies and property rules.

terraformEdge & DNS#akamai
akamai-network-liststerraform v1.7

Verification

Live-tested

Really deployed to a cloud sandbox, verified against its outputs and assertions, then destroyed - with the teardown confirmed.

Conformance

  • Static validation (fmt · validate · tflint)
  • Security scan pending (Checkov)
  • Plan test superseded by live test

Provenance

Functional

  • Live-tested - applied, verified, destroyed

Last verified 2026-06-30 · how we verify

Verify this download

cosign · sha-256

Don't take our word for it. Every release is signed with cosign - check the bytes against our pinned public key before you trust them.

# 1. Our pinned public key - fetch once, trust out-of-band
curl -O https://www.iac-bazaar.com/cosign.pub

# 2. This module's Sigstore bundle
curl -o akamai-network-lists-1.0.2.sigstore.json \
  https://www.iac-bazaar.com/api/artifacts/akamai-network-lists/signature

# 3. Verify the tarball you downloaded
cosign verify-blob \
  --key cosign.pub \
  --bundle akamai-network-lists-1.0.2.sigstore.json \
  akamai-network-lists-1.0.2.tar.gz
# → Verified OK

# 4. (optional) confirm the checksum too
echo "0ed085e9ea4509919903a1d2e026d685d3b89f7443eeaf0f6cdbeec4dd40e9d4  akamai-network-lists-1.0.2.tar.gz" | sha256sum -c
Signature bundlePublic keyMachine-readable receiptHow we verify

Use it from the registry

terraform · opentofu
module "network_lists" {
  source  = "www.iac-bazaar.com/iac-bazaar/akamai-network-lists/akamai"
  version = "1.0.2"
}

Paid module — needs a purchase (or a subscription that covers it) plus a registry token from /account/tokens. Full setup: registry docs.

Inputs & outputs

Create a free account to read this module's contract

The declared contract — every input name, type, default and description, plus every output — is shown to signed-in accounts, not to anonymous visitors.

A free account sees the contract of every Free module. This one is Basic, so its contract unlocks when you buy it.

Create a free account →Sign in

Documentation

akamai-network-lists

Versioned Akamai Network Lists (IP/CIDR and GEO) managed as code, with optional activation — ready to feed App & API Protector IP/geo firewalls and delivery-property rules. Works with Terraform and OpenTofu (>= 1.6), Akamai provider >= 10.0, < 11.0.

Status: static-validated, live-test pending. Ships under live-test quarantine — validated with tofu fmt, tofu validate, and tflint. Real apply → activate → destroy against an Akamai account is pending a cloud sandbox (no Network Lists sandbox available yet).

What you get:

  • One akamai_networklist_network_list per entry in a single network_lists map (mix IP and GEO lists in one module).
  • Optional, opt-in activation (akamai_networklist_activations) — the sync_point is read back from each managed list so you always activate the version this apply produced.

Secure defaults

  • Lists default to mode = "REPLACE" so Terraform fully owns the contents: what is in your config is what is on Akamai — no silent drift, deny-by-default for blocklists.
  • Activation is off by default. The first apply only stages list contents; set activate = true (with notification_emails) to push live, and it targets STAGING unless you ask for PRODUCTION.
  • A precondition blocks activation when notification_emails is empty, so you never fire a silent production change.

Provider pin

akamai = {
  source  = "akamai/akamai"
  version = ">= 10.0, < 11.0"
}

License

Commercial — LicenseRef-IaCBazaar-Commercial. © IaC Bazaar. Original work (not derived from a third-party module).

Usage code & full reference unlock after purchase

The complete copy-paste usage, the full input/output reference, and operational notes ship with your licence - shown here and bundled in the download.

  • Usage
  • Inputs
  • Outputs

Related modules

AkamaiEdge & DNS

Akamai App & API Protector (WAF)

Security configuration with policy, WAF mode, match targets, rate controls, and IP/geo blocking, activated to staging or production.

$59.00v1.0.0