Datadog WAF Module

This module creates a dashboard in Datadog for monitoring an AWS based Web Application Firewall.

Usage

Add this module to your main.tf (or appropriate) file and configure the inputs to match your desired configuration. For example:

module "datadog_waf" {
  source = "github.com/codeforamerica/tofu-modules-datadog-waf?ref=1.0.0"

  default_webacls = ["my-project-prod"]
}

Make sure you re-run tofu init after adding the module to your configuration.

tofu init
tofu plan

To update the source for this module, pass -upgrade to tofu init:

tofu init -upgrade

Inputs

Name	Description	Type	Default	Required
default_webacls	Default WebACLs to for the dashboard filter.	list(string)	[]	no
threshold_allowed_caution	Caution threshold for allowed requests. Reflected when the percentage of allowed requests drops below this number.	number	95	no
threshold_allowed_warning	Warning threshold for allowed requests. Reflected when the percentage of allowed requests drops below this number.	number	85	no
threshold_blocked_caution	Caution threshold for blocked requests. Reflected when the percentage of blocked requests rises above this number.	number	5	no
threshold_blocked_warning	Warning threshold for blocked requests. Reflected when the percentage of blocked requests rises above this number.	number	10	no
threshold_counted_caution	Caution threshold for counted requests. Reflected when the percentage of counted requests rises above this number.	number	5	no
threshold_counted_warning	Warning threshold for counted requests. Reflected when the percentage of counted requests rises above this number.	number	10	no
threshold_limited_caution	Caution threshold for rate limited requests. Reflected when the percentage of rate limited rises above below this number.	number	5	no
threshold_limited_warning	Warning threshold for rate limited requests. Reflected when the percentage of rate limited requests rises above this number.	number	10	no
title	Title of the dashboard.	string	"Web Application Firewall (WAF)"	no