Forum Discussion

MarcosO's avatar
MarcosO
Icon for Altostratus rankAltostratus
May 11, 2023

F5 rules for AWS WAF Terraform

Dear, good afternoon

I'm implementing the rules of F5 OWSAP10
https://aws.amazon.com/marketplace/pp/prodview-ah3rqi2hcqzsi

But I'm working with infrastructure by Terraform code

To carry out the implementation I need the correct name of the rule and the correct name of the vendor for implementation and I cannot find this information in the documentation

Can you help me?

ex:

 

        {
          overrideAction = {
            type = var.NAME == "BLOCK" ? "NONE" : var.NAME
          }
          managedRuleGroupIdentifier = {
            "vendorName" : "NAME",
            "managedRuleGroupName" : "NAME"
          }
          ruleGroupType = "ManagedRuleGroup"
          excludeRules  = []
        }
AWS
cloud
F5 for WAF AWS
F5 Rules for AWS WAF
terraform
waf
  • MarcosO's avatar
    MarcosO
    Jun 06, 2023

    Suporte de solução muito fraco, não sabem responder o básico, consegui pela CLI, segue abaixo para quem precisar
    Mas não recomendo, acabei migrando para vendedores melhores do mercado aws

    "vendorName":"F5","managedRuleGroupName":"OWASP_Managed"

  • Joel_Cohen's avatar
    Joel_Cohen
    Icon for Employee rankEmployee
    May 25, 2023

    Hi MarcosO ,

    The “vendorName” and “managedRuleGroupName” are controlled, and part of, the AWS Firewall . I believe it is not set by F5's rule group. There should be way to retrieve them via AWS Firewall API once you have the ruleset in place.

    It should be something similar to “F5” and “OWASP” or “F5, Inc.” and “F5 Rules for AWS WAF - Web exploits OWASP Rules”.

    Thanks

    • Leslie_Hubertus's avatar
      Leslie_Hubertus
      Ret. Employee
      May 19, 2023

      FYI - we've asked a colleague who said that he is looking into this and plans to respond to you next week.

    • MarcosO's avatar
      MarcosO
      Icon for Altostratus rankAltostratus
      May 16, 2023
      Good afternoon,

Thanks for the feedback, this link sent I believe it is for another product
I need help for this product below:https://aws.amazon.com/marketplace/pp/prodview-ah3rqi2hcqzsi


I want to install the rules contracted on the marketplace by terraform but there is no documentation from f5
need the correct names for implementation
Can you help me?
  • Leslie_Hubertus's avatar
    Leslie_Hubertus
    Ret. Employee
    May 17, 2023

    Hey MarcosO - FYI I'm highlighting your question in today's Weekly Highlights article to boost visibility. Hopefully someone will come help with the answer you need soon!

  • MarcosO's avatar
    MarcosO
    Icon for Altostratus rankAltostratus
    Jun 06, 2023

    Suporte de solução muito fraco, não sabem responder o básico, consegui pela CLI, segue abaixo para quem precisar
    Mas não recomendo, acabei migrando para vendedores melhores do mercado aws

    "vendorName":"F5","managedRuleGroupName":"OWASP_Managed"

  • MarcosO's avatar
    MarcosO
    Icon for Altostratus rankAltostratus
    Jun 06, 2023

    Very weak solution support, they don't know how to answer the basics, I got it through the CLI, follow below for those who need it
    But I don't recommend it, I ended up migrating to better aws market sellers