Yandex Cloud
Search
Discuss with expertTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Terraform in Yandex Cloud
  • Getting started
  • Solution library
    • Overview
    • Release notes
          • sws_advanced_rate_limiter_profile
          • sws_security_profile
          • sws_waf_profile
          • sws_waf_rule_set_descriptor

In this article:

  • Example usage
  • Arguments & Attributes Reference
  1. Terraform reference
  2. Resources
  3. Smart Web Security
  4. Data Sources
  5. sws_waf_rule_set_descriptor

yandex_sws_waf_rule_set_descriptor (DataSource)

Written by
Yandex Cloud
Updated at May 15, 2026
  • Example usage
  • Arguments & Attributes Reference

Example usageExample usage

//
// Get information about existing SWS WAF Rule Descriptor
//
data "yandex_sws_waf_rule_set_descriptor" "owasp4" {
  name    = "OWASP Core Ruleset"
  version = "4.0.0"
}

Arguments & Attributes ReferenceArguments & Attributes Reference

  • id (String). ID of the rule set
  • name (Required)(String). Name of the RuleSetDescriptor resource to return.
  • rule_set_descriptor_id (Read-Only) (String). ID of the rule set
  • rules [Block]. List of rules
    • anomaly_score (Read-Only) (Number). Numeric anomaly value, i.e., a potential attack indicator.
      The higher this value, the more likely it is that the request that satisfies the rule is an attack.
      See documentation.
    • id (String). ID of the rule
    • paranoia_level (Read-Only) (Number). Paranoia level classifies rules according to their aggression.
      The higher the paranoia level, the better your protection, but also the higher the probability of WAF false positives.
      See documentation.
    • rule_set_descriptor_id (Read-Only) (String). ID of the rule
  • timeouts [Block].
    • create (String). A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    • delete (String). A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    • read (String). A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    • update (String). A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
  • version (Required)(String). Version of the RuleSetDescriptor resource to return.

Was the article helpful?

Previous
sws_waf_profile
Next
sws_advanced_rate_limiter_profile
© 2026 Direct Cursus Technology L.L.C.