README.md

terraform-aws-alb-waf-auth

This creates a WAF to require a certain string in a header to allow traffic to an ALB.

Use it for when you don't control the application code but want to add authentication.

Note it's not true basic auth because the WAF can't send a custom unauthorized page.

Inputs

Name	Description	Type	Default	Required
alb_arn	ALB ARN to attach the waf auth to	string	n/a	yes
waf_name_alpha	Name for WAF resources. Note this needs to be alphanumeric only.	string	n/a	yes
x_manual_auth_secret	Secret to check in x-manual-auth header, if not specified will be generated randomly	string	""	no

Outputs

Name	Description
x_manual_auth_target_string	Secret that this WAF will check for in x-manual-auth header

Usage

If specifying the secret:

module "waf_auth" {
  source               = "github.com/asicsdigital/terraform-aws-alb-waf-auth?ref=v0.0.1"
  alb_arn              = "<alb arn here>"
  waf_name_alpha       = "<some alphabetical string here>"
  x_manual_auth_secret = "<your secret here>"
}

Or, not specifying secret:

module "waf_auth" {
  source         = "github.com/asicsdigital/terraform-aws-alb-waf-auth?ref=v0.0.1"
  alb_arn        = "<alb arn here>"
  waf_name_alpha = "<some alphabetical string here>"
}

output "x_manual_auth_secret" {
  value = "${module.waf_auth.x_manual_auth_target_string}"
}

Authors

John Noss

Changelog

v0.0.1 - Initial release.

License

This software is released under the MIT License (see LICENSE).