- Home
- Documentation
- Security
- Data Sources
- xcsh_bot_allowlist_policy (Data Source)
xcsh_bot_allowlist_policy (Data Source)
Retrieves information about a Bot Allowlist Policy resource in F5 Distributed Cloud for get bot allowlist policy. configuration. (read-only data source)
~> Note: For more information, see the F5 Distributed Cloud API documentation.
Example Usage
Section titled “Example Usage”# BotAllowlistPolicy Data Source Example
terraform { required_version = ">= 1.0"
required_providers { xcsh = { source = "f5-sales-demo/xcsh" version = ">= 0.1.0" } }}
# Look up an existing BotAllowlistPolicy by namedata "xcsh_bot_allowlist_policy" "example" { name = "example-bot-allowlist-policy" namespace = "staging"}
output "bot_allowlist_policy_id" { value = data.xcsh_bot_allowlist_policy.example.id}Argument Reference
Section titled “Argument Reference”-> Syntax Rule: This provider uses OneOf groups for mutually exclusive options. Fields documented as “Optional Block” use block syntax field_name { ... }. Empty OneOf object attributes use field_name = {}; conditional selection uses condition ? {} : null. Boolean attributes (such as add_hsts and http_redirect) use = true or = false.
Metadata Argument Reference
Section titled “Metadata Argument Reference”• name - Required String
Name of the BotAllowlistPolicy to look up
• namespace - Required String
Namespace of the BotAllowlistPolicy
Attributes Reference
Section titled “Attributes Reference”In addition to all arguments above, the following attributes are exported:
• allowlist_policy_content - Optional String
IP Allowlist. Allowlist Policy Content
• annotations - Optional Map
Annotations
• description - Optional String
Description
• id - Optional String
Unique identifier
• labels - Optional Map
Labels
• latest_version - Optional String
Version. Version number or identifier
• ip_allowlist - Optional List
IP & IP Prefix. Allowlist or permitted items
• ip_range_allowlist - Optional List
IP Range. Allowlist or permitted items
• ip_detail - Optional String
IP Detail. Support the single IP value
• ip_prefix_detail - Optional String
IP Prefix Detail. Support the IP prefix value
• ip_description - Optional String
Description. The description for IP address
• ip_value - Optional String
Value. A single IP address
• ip_description - Optional String
Description. The description for IP prefix
• ip_value - Optional String
Value. IP prefix e.g. 192.0.2.0/24
• end_with - Optional String
End With. IP range end with
• ip_description - Optional String
Description. The description for IP range
• start_with - Optional String
Start With. IP range start with
Common Types
Section titled “Common Types”The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
Object Reference {#common-object-reference}
Section titled “Object Reference {#common-object-reference}”Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format tenant/namespace/name.
| Field | Type | Description |
|---|---|---|
name | String | Name of the referenced object |
namespace | String | Namespace containing the referenced object |
tenant | String | Tenant of the referenced object (system-managed) |
Transformers {#common-transformers}
Section titled “Transformers {#common-transformers}”Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
| Value | Description |
|---|---|
LOWER_CASE | Convert to lowercase |
UPPER_CASE | Convert to uppercase |
BASE64_DECODE | Decodebase64 content |
NORMALIZE_PATH | Normalize URL path |
REMOVE_WHITESPACE | Remove whitespace characters |
URL_DECODE | Decode URL-encoded characters |
TRIM_LEFT | Trim leading whitespace |
TRIM_RIGHT | Trim trailing whitespace |
TRIM | Trim both leading and trailing whitespace |
HTTP Methods {#common-http-methods}
Section titled “HTTP Methods {#common-http-methods}”HTTP methods used for request matching.
| Value | Description |
|---|---|
ANY | Match any HTTP method |
GET | HTTP GET request |
HEAD | HTTP HEAD request |
POST | HTTP POST request |
PUT | HTTP PUT request |
DELETE | HTTP DELETE request |
CONNECT | HTTP CONNECT request |
OPTIONS | HTTP OPTIONS request |
TRACE | HTTP TRACE request |
PATCH | HTTP PATCH request |
COPY | HTTP COPY request (WebDAV) |
TLS Fingerprints {#common-tls-fingerprints}
Section titled “TLS Fingerprints {#common-tls-fingerprints}”TLS fingerprint categories for malicious client detection.
| Value | Description |
|---|---|
TLS_FINGERPRINT_NONE | No fingerprint matching |
ANY_MALICIOUS_FINGERPRINT | Match any known malicious fingerprint |
ADWARE | Adware-associated fingerprints |
DRIDEX | Dridex malware fingerprints |
GOOTKIT | Gootkit malware fingerprints |
RANSOMWARE | Ransomware-associated fingerprints |
TRICKBOT | Trickbot malware fingerprints |
IP Threat Categories {#common-ip-threat-categories}
Section titled “IP Threat Categories {#common-ip-threat-categories}”IP address threat categories for security filtering.
| Value | Description |
|---|---|
SPAM_SOURCES | Known spam sources |
WINDOWS_EXPLOITS | Windows exploit sources |
WEB_ATTACKS | Web attack sources |
BOTNETS | Known botnet IPs |
SCANNERS | Network scanner IPs |
REPUTATION | Poor reputation IPs |
PHISHING | Phishing-related IPs |
PROXY | Anonymous proxy IPs |
MOBILE_THREATS | Mobile threat sources |
TOR_PROXY | Tor exit nodes |
DENIAL_OF_SERVICE | DoS attack sources |
NETWORK | Known bad network ranges |