Support managed rule group configs in aws_wafv2_web_acl for the new managed rule AWSManagedRulesATPRuleSet

[lorelei-rupp-imprivata]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

A new managed rule group was added for Account Takeover protection. The provider does not seem to support the additional configuration required -- https://docs.aws.amazon.com/waf/latest/APIReference/API_ManagedRuleGroupConfig.html
Please support the additional managed rule group configuration so we can use terraform to set up this rule set.

New or Affected Resource(s)

• aws_wafv2_web_acl

Broken Terraform Configuration

        statement {
          managed_rule_group_statement {
            name        = "AWSManagedRulesATPRuleSet"
            vendor_name = "AWS"
          }
        }

This does not work when you apply because it needs additional configuration

References

• #0000

[hasssammalik]

can we get an update on this one please

[chrisminton]

The required configuration looks something like

      "ManagedRuleGroupConfigs": [
        {
          "LoginPath": string
        },
        {
          "PayloadType": "JSON|FORM_ENCODED"
        },
        {
          "UsernameField": {
            "Identifier": string
          }
        },
        {
          "PasswordField": {
            "Identifier": string
          }
        }
      ]

[y0zg]

Any update on this please?

[marianod92]

Hello everyone!
I consulted in the other related issue, I ask again here

Has anyone been able to solve this problem with some workaround through aws-cli for example?

I tried to activate Account Takeover Prevention through Terraform with a null_resource and aws-cli, but I did not find this option in the documentation and reference examples.

Thanks!