akamai.getAppSecEvalPenaltyBox
Scopes: Security policy
ASE_Beta.: Returns the penalty box settings for a security policy in evaluation mode - evaluation penalty box. When the penalty box is enabled for a policy in evaluation mode, clients that trigger a WAF Deny action are placed in the “penalty box”. There, the action you select for the penalty box (either Alert or Deny) continues to apply to any requests from that client for the next 10 minutes.
Related API Endpoint: /appsec/v1/configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/eval_penalty-box
Output Options
The following options can be used to determine the information returned, and how that returned information is formatted:
action
. Action taken any time the penalty box is triggered. Valid values are:- alert. Record the event.
- deny. The request is blocked.
- deny_custom_{custom_deny_id}. The action defined by the custom deny is taken.
- none. Take no action.
enabled
. If true, evaluation penalty box protection is enabled. If false, evaluation penalty box protection is disabled.output_text
. Tabular report of evaluation penalty box protection settings.
Example Usage
Basic usage
using System.Collections.Generic;
using Pulumi;
using Akamai = Pulumi.Akamai;
return await Deployment.RunAsync(() =>
{
var configuration = Akamai.GetAppSecConfiguration.Invoke(new()
{
Name = "Documentation",
});
var evalPenaltyBox = Akamai.GetAppSecEvalPenaltyBox.Invoke(new()
{
ConfigId = configuration.Apply(getAppSecConfigurationResult => getAppSecConfigurationResult.ConfigId),
SecurityPolicyId = "gms1_134637",
});
return new Dictionary<string, object?>
{
["evalPenaltyBoxAction"] = evalPenaltyBox.Apply(getAppSecEvalPenaltyBoxResult => getAppSecEvalPenaltyBoxResult.Action),
["evalPenaltyBoxEnabled"] = evalPenaltyBox.Apply(getAppSecEvalPenaltyBoxResult => getAppSecEvalPenaltyBoxResult.Enabled),
["evalPenaltyBoxText"] = evalPenaltyBox.Apply(getAppSecEvalPenaltyBoxResult => getAppSecEvalPenaltyBoxResult.OutputText),
};
});
package main
import (
"github.com/pulumi/pulumi-akamai/sdk/v4/go/akamai"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
configuration, err := akamai.LookupAppSecConfiguration(ctx, &akamai.LookupAppSecConfigurationArgs{
Name: pulumi.StringRef("Documentation"),
}, nil)
if err != nil {
return err
}
evalPenaltyBox, err := akamai.LookupAppSecEvalPenaltyBox(ctx, &akamai.LookupAppSecEvalPenaltyBoxArgs{
ConfigId: configuration.ConfigId,
SecurityPolicyId: "gms1_134637",
}, nil)
if err != nil {
return err
}
ctx.Export("evalPenaltyBoxAction", evalPenaltyBox.Action)
ctx.Export("evalPenaltyBoxEnabled", evalPenaltyBox.Enabled)
ctx.Export("evalPenaltyBoxText", evalPenaltyBox.OutputText)
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.akamai.AkamaiFunctions;
import com.pulumi.akamai.inputs.GetAppSecConfigurationArgs;
import com.pulumi.akamai.inputs.GetAppSecEvalPenaltyBoxArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var configuration = AkamaiFunctions.getAppSecConfiguration(GetAppSecConfigurationArgs.builder()
.name("Documentation")
.build());
final var evalPenaltyBox = AkamaiFunctions.getAppSecEvalPenaltyBox(GetAppSecEvalPenaltyBoxArgs.builder()
.configId(configuration.applyValue(getAppSecConfigurationResult -> getAppSecConfigurationResult.configId()))
.securityPolicyId("gms1_134637")
.build());
ctx.export("evalPenaltyBoxAction", evalPenaltyBox.applyValue(getAppSecEvalPenaltyBoxResult -> getAppSecEvalPenaltyBoxResult.action()));
ctx.export("evalPenaltyBoxEnabled", evalPenaltyBox.applyValue(getAppSecEvalPenaltyBoxResult -> getAppSecEvalPenaltyBoxResult.enabled()));
ctx.export("evalPenaltyBoxText", evalPenaltyBox.applyValue(getAppSecEvalPenaltyBoxResult -> getAppSecEvalPenaltyBoxResult.outputText()));
}
}
import pulumi
import pulumi_akamai as akamai
configuration = akamai.get_app_sec_configuration(name="Documentation")
eval_penalty_box = akamai.get_app_sec_eval_penalty_box(config_id=configuration.config_id,
security_policy_id="gms1_134637")
pulumi.export("evalPenaltyBoxAction", eval_penalty_box.action)
pulumi.export("evalPenaltyBoxEnabled", eval_penalty_box.enabled)
pulumi.export("evalPenaltyBoxText", eval_penalty_box.output_text)
import * as pulumi from "@pulumi/pulumi";
import * as akamai from "@pulumi/akamai";
const configuration = akamai.getAppSecConfiguration({
name: "Documentation",
});
const evalPenaltyBox = configuration.then(configuration => akamai.getAppSecEvalPenaltyBox({
configId: configuration.configId,
securityPolicyId: "gms1_134637",
}));
export const evalPenaltyBoxAction = evalPenaltyBox.then(evalPenaltyBox => evalPenaltyBox.action);
export const evalPenaltyBoxEnabled = evalPenaltyBox.then(evalPenaltyBox => evalPenaltyBox.enabled);
export const evalPenaltyBoxText = evalPenaltyBox.then(evalPenaltyBox => evalPenaltyBox.outputText);
variables:
configuration:
fn::invoke:
Function: akamai:getAppSecConfiguration
Arguments:
name: Documentation
evalPenaltyBox:
fn::invoke:
Function: akamai:getAppSecEvalPenaltyBox
Arguments:
configId: ${configuration.configId}
securityPolicyId: gms1_134637
outputs:
evalPenaltyBoxAction: ${evalPenaltyBox.action}
evalPenaltyBoxEnabled: ${evalPenaltyBox.enabled}
evalPenaltyBoxText: ${evalPenaltyBox.outputText}
Using getAppSecEvalPenaltyBox
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getAppSecEvalPenaltyBox(args: GetAppSecEvalPenaltyBoxArgs, opts?: InvokeOptions): Promise<GetAppSecEvalPenaltyBoxResult>
function getAppSecEvalPenaltyBoxOutput(args: GetAppSecEvalPenaltyBoxOutputArgs, opts?: InvokeOptions): Output<GetAppSecEvalPenaltyBoxResult>
def get_app_sec_eval_penalty_box(config_id: Optional[int] = None,
security_policy_id: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetAppSecEvalPenaltyBoxResult
def get_app_sec_eval_penalty_box_output(config_id: Optional[pulumi.Input[int]] = None,
security_policy_id: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetAppSecEvalPenaltyBoxResult]
func LookupAppSecEvalPenaltyBox(ctx *Context, args *LookupAppSecEvalPenaltyBoxArgs, opts ...InvokeOption) (*LookupAppSecEvalPenaltyBoxResult, error)
func LookupAppSecEvalPenaltyBoxOutput(ctx *Context, args *LookupAppSecEvalPenaltyBoxOutputArgs, opts ...InvokeOption) LookupAppSecEvalPenaltyBoxResultOutput
> Note: This function is named LookupAppSecEvalPenaltyBox
in the Go SDK.
public static class GetAppSecEvalPenaltyBox
{
public static Task<GetAppSecEvalPenaltyBoxResult> InvokeAsync(GetAppSecEvalPenaltyBoxArgs args, InvokeOptions? opts = null)
public static Output<GetAppSecEvalPenaltyBoxResult> Invoke(GetAppSecEvalPenaltyBoxInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetAppSecEvalPenaltyBoxResult> getAppSecEvalPenaltyBox(GetAppSecEvalPenaltyBoxArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet
fn::invoke:
function: akamai:index/getAppSecEvalPenaltyBox:getAppSecEvalPenaltyBox
arguments:
# arguments dictionary
The following arguments are supported:
- Config
Id int . Unique identifier of the security configuration associated with the evaluation penalty box settings.
- Security
Policy stringId . Unique identifier of the security policy associated with the evaluation penalty box settings.
- Config
Id int . Unique identifier of the security configuration associated with the evaluation penalty box settings.
- Security
Policy stringId . Unique identifier of the security policy associated with the evaluation penalty box settings.
- config
Id Integer . Unique identifier of the security configuration associated with the evaluation penalty box settings.
- security
Policy StringId . Unique identifier of the security policy associated with the evaluation penalty box settings.
- config
Id number . Unique identifier of the security configuration associated with the evaluation penalty box settings.
- security
Policy stringId . Unique identifier of the security policy associated with the evaluation penalty box settings.
- config_
id int . Unique identifier of the security configuration associated with the evaluation penalty box settings.
- security_
policy_ strid . Unique identifier of the security policy associated with the evaluation penalty box settings.
- config
Id Number . Unique identifier of the security configuration associated with the evaluation penalty box settings.
- security
Policy StringId . Unique identifier of the security policy associated with the evaluation penalty box settings.
getAppSecEvalPenaltyBox Result
The following output properties are available:
- Action string
- Config
Id int - Enabled bool
- Id string
The provider-assigned unique ID for this managed resource.
- Output
Text string - Security
Policy stringId
- Action string
- Config
Id int - Enabled bool
- Id string
The provider-assigned unique ID for this managed resource.
- Output
Text string - Security
Policy stringId
- action String
- config
Id Integer - enabled Boolean
- id String
The provider-assigned unique ID for this managed resource.
- output
Text String - security
Policy StringId
- action string
- config
Id number - enabled boolean
- id string
The provider-assigned unique ID for this managed resource.
- output
Text string - security
Policy stringId
- action str
- config_
id int - enabled bool
- id str
The provider-assigned unique ID for this managed resource.
- output_
text str - security_
policy_ strid
- action String
- config
Id Number - enabled Boolean
- id String
The provider-assigned unique ID for this managed resource.
- output
Text String - security
Policy StringId
Package Details
- Repository
- Akamai pulumi/pulumi-akamai
- License
- Apache-2.0
- Notes
This Pulumi package is based on the
akamai
Terraform Provider.