Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Datadog Provider
  3. API Docs
  4. AppsecWafCustomRule
Datadog v4.49.0 published on Thursday, Apr 17, 2025 by Pulumi
pulumi/pulumi-datadog

datadog.AppsecWafCustomRule

Explore with Pulumi AI

Datadog v4.49.0 published on Thursday, Apr 17, 2025 by Pulumi
pulumi/pulumi-datadog

Provides a Datadog AppsecWafCustomRule resource. This can be used to create and manage Datadog appsec_waf_custom_rule.

Example Usage

Coming soon!

Coming soon!

Coming soon!

Coming soon!

Coming soon!

resources:
  # Create a new WAF custom rule to block a custom IoC
  ioc000:
    type: datadog:AppsecWafCustomRule
    properties:
      name: Block requests from a bad actor
      blocking: true
      enabled: true
      tags:
        category: attack_attempt
        type: custom_ioc
      pathGlob: /db/*
      conditions:
        - operator: match_regex
          parameters:
            - inputs:
                - address: server.db.statement
              regex: stmt.*
      action:
        - action: redirect_request
          parameters:
            - statusCode: 302
              location: /blocking
  # Create a WAF custom rule to track business logic events
  biz000:
    type: datadog:AppsecWafCustomRule
    properties:
      name: Track payments
      blocking: false
      enabled: true
      tags:
        category: business_logic
        type: payment.checkout
      pathGlob: /cart/*
      conditions:
        - operator: capture_data
          parameters:
            - inputs:
                - address: server.request.query
                  keyPaths:
                    - payment_id
              value: payment
      scopes:
        - env: prod
          service: paymentsvc
Copy

Create AppsecWafCustomRule Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new AppsecWafCustomRule(name: string, args: AppsecWafCustomRuleArgs, opts?: CustomResourceOptions);
@overload
def AppsecWafCustomRule(resource_name: str,
                        args: AppsecWafCustomRuleArgs,
                        opts: Optional[ResourceOptions] = None)

@overload
def AppsecWafCustomRule(resource_name: str,
                        opts: Optional[ResourceOptions] = None,
                        blocking: Optional[bool] = None,
                        enabled: Optional[bool] = None,
                        name: Optional[str] = None,
                        tags: Optional[Mapping[str, str]] = None,
                        action: Optional[AppsecWafCustomRuleActionArgs] = None,
                        conditions: Optional[Sequence[AppsecWafCustomRuleConditionArgs]] = None,
                        path_glob: Optional[str] = None,
                        scopes: Optional[Sequence[AppsecWafCustomRuleScopeArgs]] = None)
func NewAppsecWafCustomRule(ctx *Context, name string, args AppsecWafCustomRuleArgs, opts ...ResourceOption) (*AppsecWafCustomRule, error)
public AppsecWafCustomRule(string name, AppsecWafCustomRuleArgs args, CustomResourceOptions? opts = null)
public AppsecWafCustomRule(String name, AppsecWafCustomRuleArgs args)
public AppsecWafCustomRule(String name, AppsecWafCustomRuleArgs args, CustomResourceOptions options)

type: datadog:AppsecWafCustomRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. AppsecWafCustomRuleArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. AppsecWafCustomRuleArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. AppsecWafCustomRuleArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. AppsecWafCustomRuleArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. AppsecWafCustomRuleArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var appsecWafCustomRuleResource = new Datadog.AppsecWafCustomRule("appsecWafCustomRuleResource", new()
{
    Blocking = false,
    Enabled = false,
    Name = "string",
    Tags = 
    {
        { "string", "string" },
    },
    Action = new Datadog.Inputs.AppsecWafCustomRuleActionArgs
    {
        Action = "string",
        Parameters = new Datadog.Inputs.AppsecWafCustomRuleActionParametersArgs
        {
            Location = "string",
            StatusCode = 0,
        },
    },
    Conditions = new[]
    {
        new Datadog.Inputs.AppsecWafCustomRuleConditionArgs
        {
            Operator = "string",
            Parameters = new Datadog.Inputs.AppsecWafCustomRuleConditionParametersArgs
            {
                Data = "string",
                Inputs = new[]
                {
                    new Datadog.Inputs.AppsecWafCustomRuleConditionParametersInputArgs
                    {
                        Address = "string",
                        KeyPaths = new[]
                        {
                            "string",
                        },
                    },
                },
                Lists = new[]
                {
                    "string",
                },
                Options = new Datadog.Inputs.AppsecWafCustomRuleConditionParametersOptionsArgs
                {
                    CaseSensitive = false,
                    MinLength = 0,
                },
                Regex = "string",
                Value = "string",
            },
        },
    },
    PathGlob = "string",
    Scopes = new[]
    {
        new Datadog.Inputs.AppsecWafCustomRuleScopeArgs
        {
            Env = "string",
            Service = "string",
        },
    },
});
Copy
example, err := datadog.NewAppsecWafCustomRule(ctx, "appsecWafCustomRuleResource", &datadog.AppsecWafCustomRuleArgs{
	Blocking: pulumi.Bool(false),
	Enabled:  pulumi.Bool(false),
	Name:     pulumi.String("string"),
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Action: &datadog.AppsecWafCustomRuleActionArgs{
		Action: pulumi.String("string"),
		Parameters: &datadog.AppsecWafCustomRuleActionParametersArgs{
			Location:   pulumi.String("string"),
			StatusCode: pulumi.Int(0),
		},
	},
	Conditions: datadog.AppsecWafCustomRuleConditionArray{
		&datadog.AppsecWafCustomRuleConditionArgs{
			Operator: pulumi.String("string"),
			Parameters: &datadog.AppsecWafCustomRuleConditionParametersArgs{
				Data: pulumi.String("string"),
				Inputs: datadog.AppsecWafCustomRuleConditionParametersInputTypeArray{
					&datadog.AppsecWafCustomRuleConditionParametersInputTypeArgs{
						Address: pulumi.String("string"),
						KeyPaths: pulumi.StringArray{
							pulumi.String("string"),
						},
					},
				},
				Lists: pulumi.StringArray{
					pulumi.String("string"),
				},
				Options: &datadog.AppsecWafCustomRuleConditionParametersOptionsArgs{
					CaseSensitive: pulumi.Bool(false),
					MinLength:     pulumi.Int(0),
				},
				Regex: pulumi.String("string"),
				Value: pulumi.String("string"),
			},
		},
	},
	PathGlob: pulumi.String("string"),
	Scopes: datadog.AppsecWafCustomRuleScopeArray{
		&datadog.AppsecWafCustomRuleScopeArgs{
			Env:     pulumi.String("string"),
			Service: pulumi.String("string"),
		},
	},
})
Copy
var appsecWafCustomRuleResource = new AppsecWafCustomRule("appsecWafCustomRuleResource", AppsecWafCustomRuleArgs.builder()
    .blocking(false)
    .enabled(false)
    .name("string")
    .tags(Map.of("string", "string"))
    .action(AppsecWafCustomRuleActionArgs.builder()
        .action("string")
        .parameters(AppsecWafCustomRuleActionParametersArgs.builder()
            .location("string")
            .statusCode(0)
            .build())
        .build())
    .conditions(AppsecWafCustomRuleConditionArgs.builder()
        .operator("string")
        .parameters(AppsecWafCustomRuleConditionParametersArgs.builder()
            .data("string")
            .inputs(AppsecWafCustomRuleConditionParametersInputArgs.builder()
                .address("string")
                .keyPaths("string")
                .build())
            .lists("string")
            .options(AppsecWafCustomRuleConditionParametersOptionsArgs.builder()
                .caseSensitive(false)
                .minLength(0)
                .build())
            .regex("string")
            .value("string")
            .build())
        .build())
    .pathGlob("string")
    .scopes(AppsecWafCustomRuleScopeArgs.builder()
        .env("string")
        .service("string")
        .build())
    .build());
Copy
appsec_waf_custom_rule_resource = datadog.AppsecWafCustomRule("appsecWafCustomRuleResource",
    blocking=False,
    enabled=False,
    name="string",
    tags={
        "string": "string",
    },
    action={
        "action": "string",
        "parameters": {
            "location": "string",
            "status_code": 0,
        },
    },
    conditions=[{
        "operator": "string",
        "parameters": {
            "data": "string",
            "inputs": [{
                "address": "string",
                "key_paths": ["string"],
            }],
            "lists": ["string"],
            "options": {
                "case_sensitive": False,
                "min_length": 0,
            },
            "regex": "string",
            "value": "string",
        },
    }],
    path_glob="string",
    scopes=[{
        "env": "string",
        "service": "string",
    }])
Copy
const appsecWafCustomRuleResource = new datadog.AppsecWafCustomRule("appsecWafCustomRuleResource", {
    blocking: false,
    enabled: false,
    name: "string",
    tags: {
        string: "string",
    },
    action: {
        action: "string",
        parameters: {
            location: "string",
            statusCode: 0,
        },
    },
    conditions: [{
        operator: "string",
        parameters: {
            data: "string",
            inputs: [{
                address: "string",
                keyPaths: ["string"],
            }],
            lists: ["string"],
            options: {
                caseSensitive: false,
                minLength: 0,
            },
            regex: "string",
            value: "string",
        },
    }],
    pathGlob: "string",
    scopes: [{
        env: "string",
        service: "string",
    }],
});
Copy
type: datadog:AppsecWafCustomRule
properties:
    action:
        action: string
        parameters:
            location: string
            statusCode: 0
    blocking: false
    conditions:
        - operator: string
          parameters:
            data: string
            inputs:
                - address: string
                  keyPaths:
                    - string
            lists:
                - string
            options:
                caseSensitive: false
                minLength: 0
            regex: string
            value: string
    enabled: false
    name: string
    pathGlob: string
    scopes:
        - env: string
          service: string
    tags:
        string: string
Copy

AppsecWafCustomRule Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The AppsecWafCustomRule resource accepts the following input properties:

Blocking This property is required. bool
Indicates whether the WAF custom rule will block the request.
Enabled This property is required. bool
Indicates whether the WAF custom rule is enabled.
Name This property is required. string
The Name of the WAF custom rule.
Tags This property is required. Dictionary<string, string>
Tags associated with the WAF custom rule. category and type tags are required. Supported categories include business_logic, attack_attempt and security_response.
Action AppsecWafCustomRuleAction
Conditions List<AppsecWafCustomRuleCondition>
PathGlob string
The path glob for the WAF custom rule.
Scopes List<AppsecWafCustomRuleScope>
Blocking This property is required. bool
Indicates whether the WAF custom rule will block the request.
Enabled This property is required. bool
Indicates whether the WAF custom rule is enabled.
Name This property is required. string
The Name of the WAF custom rule.
Tags This property is required. map[string]string
Tags associated with the WAF custom rule. category and type tags are required. Supported categories include business_logic, attack_attempt and security_response.
Action AppsecWafCustomRuleActionArgs
Conditions []AppsecWafCustomRuleConditionArgs
PathGlob string
The path glob for the WAF custom rule.
Scopes []AppsecWafCustomRuleScopeArgs
blocking This property is required. Boolean
Indicates whether the WAF custom rule will block the request.
enabled This property is required. Boolean
Indicates whether the WAF custom rule is enabled.
name This property is required. String
The Name of the WAF custom rule.
tags This property is required. Map<String,String>
Tags associated with the WAF custom rule. category and type tags are required. Supported categories include business_logic, attack_attempt and security_response.
action AppsecWafCustomRuleAction
conditions List<AppsecWafCustomRuleCondition>
pathGlob String
The path glob for the WAF custom rule.
scopes List<AppsecWafCustomRuleScope>
blocking This property is required. boolean
Indicates whether the WAF custom rule will block the request.
enabled This property is required. boolean
Indicates whether the WAF custom rule is enabled.
name This property is required. string
The Name of the WAF custom rule.
tags This property is required. {[key: string]: string}
Tags associated with the WAF custom rule. category and type tags are required. Supported categories include business_logic, attack_attempt and security_response.
action AppsecWafCustomRuleAction
conditions AppsecWafCustomRuleCondition[]
pathGlob string
The path glob for the WAF custom rule.
scopes AppsecWafCustomRuleScope[]
blocking This property is required. bool
Indicates whether the WAF custom rule will block the request.
enabled This property is required. bool
Indicates whether the WAF custom rule is enabled.
name This property is required. str
The Name of the WAF custom rule.
tags This property is required. Mapping[str, str]
Tags associated with the WAF custom rule. category and type tags are required. Supported categories include business_logic, attack_attempt and security_response.
action AppsecWafCustomRuleActionArgs
conditions Sequence[AppsecWafCustomRuleConditionArgs]
path_glob str
The path glob for the WAF custom rule.
scopes Sequence[AppsecWafCustomRuleScopeArgs]
blocking This property is required. Boolean
Indicates whether the WAF custom rule will block the request.
enabled This property is required. Boolean
Indicates whether the WAF custom rule is enabled.
name This property is required. String
The Name of the WAF custom rule.
tags This property is required. Map<String>
Tags associated with the WAF custom rule. category and type tags are required. Supported categories include business_logic, attack_attempt and security_response.
action Property Map
conditions List<Property Map>
pathGlob String
The path glob for the WAF custom rule.
scopes List<Property Map>

Outputs

All input properties are implicitly available as output properties. Additionally, the AppsecWafCustomRule resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing AppsecWafCustomRule Resource

Get an existing AppsecWafCustomRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: AppsecWafCustomRuleState, opts?: CustomResourceOptions): AppsecWafCustomRule
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        action: Optional[AppsecWafCustomRuleActionArgs] = None,
        blocking: Optional[bool] = None,
        conditions: Optional[Sequence[AppsecWafCustomRuleConditionArgs]] = None,
        enabled: Optional[bool] = None,
        name: Optional[str] = None,
        path_glob: Optional[str] = None,
        scopes: Optional[Sequence[AppsecWafCustomRuleScopeArgs]] = None,
        tags: Optional[Mapping[str, str]] = None) -> AppsecWafCustomRule
func GetAppsecWafCustomRule(ctx *Context, name string, id IDInput, state *AppsecWafCustomRuleState, opts ...ResourceOption) (*AppsecWafCustomRule, error)
public static AppsecWafCustomRule Get(string name, Input<string> id, AppsecWafCustomRuleState? state, CustomResourceOptions? opts = null)
public static AppsecWafCustomRule get(String name, Output<String> id, AppsecWafCustomRuleState state, CustomResourceOptions options)
resources:  _:    type: datadog:AppsecWafCustomRule    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Action AppsecWafCustomRuleAction
Blocking bool
Indicates whether the WAF custom rule will block the request.
Conditions List<AppsecWafCustomRuleCondition>
Enabled bool
Indicates whether the WAF custom rule is enabled.
Name string
The Name of the WAF custom rule.
PathGlob string
The path glob for the WAF custom rule.
Scopes List<AppsecWafCustomRuleScope>
Tags Dictionary<string, string>
Tags associated with the WAF custom rule. category and type tags are required. Supported categories include business_logic, attack_attempt and security_response.
Action AppsecWafCustomRuleActionArgs
Blocking bool
Indicates whether the WAF custom rule will block the request.
Conditions []AppsecWafCustomRuleConditionArgs
Enabled bool
Indicates whether the WAF custom rule is enabled.
Name string
The Name of the WAF custom rule.
PathGlob string
The path glob for the WAF custom rule.
Scopes []AppsecWafCustomRuleScopeArgs
Tags map[string]string
Tags associated with the WAF custom rule. category and type tags are required. Supported categories include business_logic, attack_attempt and security_response.
action AppsecWafCustomRuleAction
blocking Boolean
Indicates whether the WAF custom rule will block the request.
conditions List<AppsecWafCustomRuleCondition>
enabled Boolean
Indicates whether the WAF custom rule is enabled.
name String
The Name of the WAF custom rule.
pathGlob String
The path glob for the WAF custom rule.
scopes List<AppsecWafCustomRuleScope>
tags Map<String,String>
Tags associated with the WAF custom rule. category and type tags are required. Supported categories include business_logic, attack_attempt and security_response.
action AppsecWafCustomRuleAction
blocking boolean
Indicates whether the WAF custom rule will block the request.
conditions AppsecWafCustomRuleCondition[]
enabled boolean
Indicates whether the WAF custom rule is enabled.
name string
The Name of the WAF custom rule.
pathGlob string
The path glob for the WAF custom rule.
scopes AppsecWafCustomRuleScope[]
tags {[key: string]: string}
Tags associated with the WAF custom rule. category and type tags are required. Supported categories include business_logic, attack_attempt and security_response.
action AppsecWafCustomRuleActionArgs
blocking bool
Indicates whether the WAF custom rule will block the request.
conditions Sequence[AppsecWafCustomRuleConditionArgs]
enabled bool
Indicates whether the WAF custom rule is enabled.
name str
The Name of the WAF custom rule.
path_glob str
The path glob for the WAF custom rule.
scopes Sequence[AppsecWafCustomRuleScopeArgs]
tags Mapping[str, str]
Tags associated with the WAF custom rule. category and type tags are required. Supported categories include business_logic, attack_attempt and security_response.
action Property Map
blocking Boolean
Indicates whether the WAF custom rule will block the request.
conditions List<Property Map>
enabled Boolean
Indicates whether the WAF custom rule is enabled.
name String
The Name of the WAF custom rule.
pathGlob String
The path glob for the WAF custom rule.
scopes List<Property Map>
tags Map<String>
Tags associated with the WAF custom rule. category and type tags are required. Supported categories include business_logic, attack_attempt and security_response.

Supporting Types

AppsecWafCustomRuleAction
, AppsecWafCustomRuleActionArgs

Action string
Override the default action to take when the WAF custom rule would block.
Parameters AppsecWafCustomRuleActionParameters
Action string
Override the default action to take when the WAF custom rule would block.
Parameters AppsecWafCustomRuleActionParameters
action String
Override the default action to take when the WAF custom rule would block.
parameters AppsecWafCustomRuleActionParameters
action string
Override the default action to take when the WAF custom rule would block.
parameters AppsecWafCustomRuleActionParameters
action str
Override the default action to take when the WAF custom rule would block.
parameters AppsecWafCustomRuleActionParameters
action String
Override the default action to take when the WAF custom rule would block.
parameters Property Map

AppsecWafCustomRuleActionParameters
, AppsecWafCustomRuleActionParametersArgs

Location string
The location to redirect to when the WAF custom rule triggers.
StatusCode int
The status code to return when the WAF custom rule triggers.
Location string
The location to redirect to when the WAF custom rule triggers.
StatusCode int
The status code to return when the WAF custom rule triggers.
location String
The location to redirect to when the WAF custom rule triggers.
statusCode Integer
The status code to return when the WAF custom rule triggers.
location string
The location to redirect to when the WAF custom rule triggers.
statusCode number
The status code to return when the WAF custom rule triggers.
location str
The location to redirect to when the WAF custom rule triggers.
status_code int
The status code to return when the WAF custom rule triggers.
location String
The location to redirect to when the WAF custom rule triggers.
statusCode Number
The status code to return when the WAF custom rule triggers.

AppsecWafCustomRuleCondition
, AppsecWafCustomRuleConditionArgs

Operator string
Operator to use for the WAF Condition.
Parameters AppsecWafCustomRuleConditionParameters
Operator string
Operator to use for the WAF Condition.
Parameters AppsecWafCustomRuleConditionParameters
operator String
Operator to use for the WAF Condition.
parameters AppsecWafCustomRuleConditionParameters
operator string
Operator to use for the WAF Condition.
parameters AppsecWafCustomRuleConditionParameters
operator str
Operator to use for the WAF Condition.
parameters AppsecWafCustomRuleConditionParameters
operator String
Operator to use for the WAF Condition.
parameters Property Map

AppsecWafCustomRuleConditionParameters
, AppsecWafCustomRuleConditionParametersArgs

Data string
Identifier of a list of data from the denylist. Can only be used as substitution from the list parameter.
Inputs List<AppsecWafCustomRuleConditionParametersInput>
Lists List<string>
List of value to use with the condition. Only used with the phrasematch, !phrasematch, exactmatch and !exactmatch operator.
Options AppsecWafCustomRuleConditionParametersOptions
Regex string
Regex to use with the condition. Only used with matchregex and !matchregex operator.
Value string
Store the captured value in the specified tag name. Only used with the capture_data operator.
Data string
Identifier of a list of data from the denylist. Can only be used as substitution from the list parameter.
Inputs []AppsecWafCustomRuleConditionParametersInputType
Lists []string
List of value to use with the condition. Only used with the phrasematch, !phrasematch, exactmatch and !exactmatch operator.
Options AppsecWafCustomRuleConditionParametersOptions
Regex string
Regex to use with the condition. Only used with matchregex and !matchregex operator.
Value string
Store the captured value in the specified tag name. Only used with the capture_data operator.
data String
Identifier of a list of data from the denylist. Can only be used as substitution from the list parameter.
inputs List<AppsecWafCustomRuleConditionParametersInput>
lists List<String>
List of value to use with the condition. Only used with the phrasematch, !phrasematch, exactmatch and !exactmatch operator.
options AppsecWafCustomRuleConditionParametersOptions
regex String
Regex to use with the condition. Only used with matchregex and !matchregex operator.
value String
Store the captured value in the specified tag name. Only used with the capture_data operator.
data string
Identifier of a list of data from the denylist. Can only be used as substitution from the list parameter.
inputs AppsecWafCustomRuleConditionParametersInput[]
lists string[]
List of value to use with the condition. Only used with the phrasematch, !phrasematch, exactmatch and !exactmatch operator.
options AppsecWafCustomRuleConditionParametersOptions
regex string
Regex to use with the condition. Only used with matchregex and !matchregex operator.
value string
Store the captured value in the specified tag name. Only used with the capture_data operator.
data str
Identifier of a list of data from the denylist. Can only be used as substitution from the list parameter.
inputs Sequence[AppsecWafCustomRuleConditionParametersInput]
lists Sequence[str]
List of value to use with the condition. Only used with the phrasematch, !phrasematch, exactmatch and !exactmatch operator.
options AppsecWafCustomRuleConditionParametersOptions
regex str
Regex to use with the condition. Only used with matchregex and !matchregex operator.
value str
Store the captured value in the specified tag name. Only used with the capture_data operator.
data String
Identifier of a list of data from the denylist. Can only be used as substitution from the list parameter.
inputs List<Property Map>
lists List<String>
List of value to use with the condition. Only used with the phrasematch, !phrasematch, exactmatch and !exactmatch operator.
options Property Map
regex String
Regex to use with the condition. Only used with matchregex and !matchregex operator.
value String
Store the captured value in the specified tag name. Only used with the capture_data operator.

AppsecWafCustomRuleConditionParametersInput
, AppsecWafCustomRuleConditionParametersInputArgs

Address string
Input from the request on which the condition should apply.
KeyPaths List<string>
Specific path for the input.
Address string
Input from the request on which the condition should apply.
KeyPaths []string
Specific path for the input.
address String
Input from the request on which the condition should apply.
keyPaths List<String>
Specific path for the input.
address string
Input from the request on which the condition should apply.
keyPaths string[]
Specific path for the input.
address str
Input from the request on which the condition should apply.
key_paths Sequence[str]
Specific path for the input.
address String
Input from the request on which the condition should apply.
keyPaths List<String>
Specific path for the input.

AppsecWafCustomRuleConditionParametersOptions
, AppsecWafCustomRuleConditionParametersOptionsArgs

CaseSensitive bool
Evaluate the value as case sensitive.
MinLength int
Only evaluate this condition if the value has a minimum amount of characters.
CaseSensitive bool
Evaluate the value as case sensitive.
MinLength int
Only evaluate this condition if the value has a minimum amount of characters.
caseSensitive Boolean
Evaluate the value as case sensitive.
minLength Integer
Only evaluate this condition if the value has a minimum amount of characters.
caseSensitive boolean
Evaluate the value as case sensitive.
minLength number
Only evaluate this condition if the value has a minimum amount of characters.
case_sensitive bool
Evaluate the value as case sensitive.
min_length int
Only evaluate this condition if the value has a minimum amount of characters.
caseSensitive Boolean
Evaluate the value as case sensitive.
minLength Number
Only evaluate this condition if the value has a minimum amount of characters.

AppsecWafCustomRuleScope
, AppsecWafCustomRuleScopeArgs

Env string
The environment scope for the WAF custom rule.
Service string
The service scope for the WAF custom rule.
Env string
The environment scope for the WAF custom rule.
Service string
The service scope for the WAF custom rule.
env String
The environment scope for the WAF custom rule.
service String
The service scope for the WAF custom rule.
env string
The environment scope for the WAF custom rule.
service string
The service scope for the WAF custom rule.
env str
The environment scope for the WAF custom rule.
service str
The service scope for the WAF custom rule.
env String
The environment scope for the WAF custom rule.
service String
The service scope for the WAF custom rule.

Import

$ pulumi import datadog:index/appsecWafCustomRule:AppsecWafCustomRule new_list ""
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
Datadog pulumi/pulumi-datadog
License
Apache-2.0
Notes
This Pulumi package is based on the datadog Terraform Provider.
Datadog v4.49.0 published on Thursday, Apr 17, 2025 by Pulumi
pulumi/pulumi-datadog