Add threat intelligence exclusion list about terraform-google-cloud-armor HOT 6 CLOSED

Not yet. I'll take care of it.

from terraform-google-cloud-armor.

@jasonloewen I have added exclude_ip (see example here). Can you point to github module directly and test this code and see if it works fine?

from terraform-google-cloud-armor.

@jasonloewen Can you plz confirm if this is correct syntax for multiple IP address exclusion?

"evaluateThreatIntelligence('iplist-known-malicious-ips', ['47.100.100.100','47.189.12.139'])"

from terraform-google-cloud-armor.

I got the code to commit when I used null as the exclude_ip value, but when I change the value to an IP I get the following error:

Error: Invalid template interpolation value

  on .terraform/modules/cloud_armor/main.tf line 384, in resource "google_compute_security_policy" "policy":
 384:           expression = rule.value["exclude_ip"] == null ? "evaluateThreatIntelligence('${rule.value["feed"]}')" : "evaluateThreatIntelligence('${rule.value["feed"]}',${rule.value["exclude_ip"]})"
    ├────────────────
    │ rule.value["exclude_ip"] is tuple with 1 element

Cannot include the given value in a string template: string required.

from terraform-google-cloud-armor.

I was able to apply this list using this format via the console:

evaluateThreatIntelligence('iplist-known-malicious-ips',['10.0.0.1','10.0.2.1','192.168.0.0/24'])

from terraform-google-cloud-armor.

@jasonloewen I have fixed the issue and it is working fine. Waiting for PR #57 merge.

from terraform-google-cloud-armor.