F5 rules for AWS WAF Terraform

[MarcosO]

Dear, good afternoon

I'm implementing the rules of F5 OWSAP10
https://aws.amazon.com/marketplace/pp/prodview-ah3rqi2hcqzsi

But I'm working with infrastructure by Terraform code

To carry out the implementation I need the correct name of the rule and the correct name of the vendor for implementation and I cannot find this information in the documentation

Can you help me?

ex:

        {

          overrideAction = {

            type = var.NAME == "BLOCK" ? "NONE" : var.NAME

          }

          managedRuleGroupIdentifier = {

            "vendorName" : "NAME",

            "managedRuleGroupName" : "NAME"

          }

          ruleGroupType = "ManagedRuleGroup"

          excludeRules  = []

        }

[MarcosO]

Ninguem ????

[Leslie_Hubertus]

FYI - we've asked a colleague who said that he is looking into this and plans to respond to you next week.

[LiefZimmerman]

@MarcosO - I'm no expert but I did find this page in our CloudDocs site that may provide some helpful information?
If not, let me know and I'll see if I can find an expert.

F5 BIG-IP Resources for Terraform

[MarcosO]

Good afternoon,

Thanks for the feedback, this link sent I believe it is for another product
I need help for this product below:https://aws.amazon.com/marketplace/pp/prodview-ah3rqi2hcqzsi


I want to install the rules contracted on the marketplace by terraform but there is no documentation from f5
need the correct names for implementation
Can you help me?

[Leslie_Hubertus]

Hey @MarcosO - FYI I'm highlighting your question in today's Weekly Highlights article to boost visibility. Hopefully someone will come help with the answer you need soon!

[Joel_Cohen]

Hi @MarcosO ,

The “vendorName” and “managedRuleGroupName” are controlled, and part of, the AWS Firewall . I believe it is not set by F5's rule group. There should be way to retrieve them via AWS Firewall API once you have the ruleset in place.

It should be something similar to “F5” and “OWASP” or “F5, Inc.” and “F5 Rules for AWS WAF - Web exploits OWASP Rules”.

Thanks

[MarcosO · Accepted solution]

Suporte de solução muito fraco, não sabem responder o básico, consegui pela CLI, segue abaixo para quem precisar
Mas não recomendo, acabei migrando para vendedores melhores do mercado aws

"vendorName":"F5","managedRuleGroupName":"OWASP_Managed"

[MarcosO]

Very weak solution support, they don't know how to answer the basics, I got it through the CLI, follow below for those who need it
But I don't recommend it, I ended up migrating to better aws market sellers