yandex_sws_waf_rule_set_descriptor (Data Source)

Get information about WAF rule sets. For more information, see the official documentation.

This data source is used to get list of rules that can be used by yandex_sws_waf_profile.

Example usageExample usage

//
// Get information about existing SWS WAF Rule Descriptor
//
data "yandex_sws_waf_rule_set_descriptor" "owasp4" {
  name    = "OWASP Core Ruleset"
  version = "4.0.0"
}

SchemaSchema

RequiredRequired

• version (String) Version of the rule set.

OptionalOptional

• name (String) Name of the rule set.
• rule_set_descriptor_id (String) ID of the rule set.

Read-OnlyRead-Only

• id (String) The ID of this resource.
• rules (List of Object) List of rules.
  • anomaly_score (Number) Numeric anomaly value, i.e., a potential attack indicator. The higher this value, the more likely it is that the request that satisfies the rule is an attack. See documentation.
  • paranoia_level (Number) Paranoia level classifies rules according to their aggression. The higher the paranoia level, the better your protection, but also the higher the probability of WAF false positives. See documentation.
  • id (String) The rule ID. (see below for nested schema)

Nested Schema for Nested Schema for rules

Read-Only:

• anomaly_score (Number)
• id (String)
• paranoia_level (Number)