Skip to content

xcsh_bot_allowlist_policy (Data Source)

Retrieves information about a Bot Allowlist Policy resource in F5 Distributed Cloud for get bot allowlist policy. configuration. (read-only data source)

~> Note: For more information, see the F5 Distributed Cloud API documentation.

# BotAllowlistPolicy Data Source Example
terraform {
required_version = ">= 1.0"
required_providers {
xcsh = {
source = "f5-sales-demo/xcsh"
version = ">= 0.1.0"
}
}
}
# Look up an existing BotAllowlistPolicy by name
data "xcsh_bot_allowlist_policy" "example" {
name = "example-bot-allowlist-policy"
namespace = "staging"
}
output "bot_allowlist_policy_id" {
value = data.xcsh_bot_allowlist_policy.example.id
}

-> Syntax Rule: This provider uses OneOf groups for mutually exclusive options. Fields documented as “Optional Block” use block syntax field_name { ... }. Empty OneOf object attributes use field_name = {}; conditional selection uses condition ? {} : null. Boolean attributes (such as add_hsts and http_redirect) use = true or = false.

• name - Required String
Name of the BotAllowlistPolicy to look up

• namespace - Required String
Namespace of the BotAllowlistPolicy

In addition to all arguments above, the following attributes are exported:

• allowlist_policy_content - Optional String
IP Allowlist. Allowlist Policy Content

• annotations - Optional Map
Annotations

• description - Optional String
Description

• id - Optional String
Unique identifier

• labels - Optional Map
Labels

• latest_version - Optional String
Version. Version number or identifier

• ip_allowlist - Optional List
IP & IP Prefix. Allowlist or permitted items

• ip_range_allowlist - Optional List
IP Range. Allowlist or permitted items

• ip_detail - Optional String
IP Detail. Support the single IP value

• ip_prefix_detail - Optional String
IP Prefix Detail. Support the IP prefix value

• ip_description - Optional String
Description. The description for IP address

• ip_value - Optional String
Value. A single IP address

• ip_description - Optional String
Description. The description for IP prefix

• ip_value - Optional String
Value. IP prefix e.g. 192.0.2.0/24

• end_with - Optional String
End With. IP range end with

• ip_description - Optional String
Description. The description for IP range

• start_with - Optional String
Start With. IP range start with


The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.

Object Reference {#common-object-reference}

Section titled “Object Reference {#common-object-reference}”

Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format tenant/namespace/name.

FieldTypeDescription
nameStringName of the referenced object
namespaceStringNamespace containing the referenced object
tenantStringTenant of the referenced object (system-managed)

Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.

ValueDescription
LOWER_CASEConvert to lowercase
UPPER_CASEConvert to uppercase
BASE64_DECODEDecodebase64 content
NORMALIZE_PATHNormalize URL path
REMOVE_WHITESPACERemove whitespace characters
URL_DECODEDecode URL-encoded characters
TRIM_LEFTTrim leading whitespace
TRIM_RIGHTTrim trailing whitespace
TRIMTrim both leading and trailing whitespace

HTTP methods used for request matching.

ValueDescription
ANYMatch any HTTP method
GETHTTP GET request
HEADHTTP HEAD request
POSTHTTP POST request
PUTHTTP PUT request
DELETEHTTP DELETE request
CONNECTHTTP CONNECT request
OPTIONSHTTP OPTIONS request
TRACEHTTP TRACE request
PATCHHTTP PATCH request
COPYHTTP COPY request (WebDAV)

TLS Fingerprints {#common-tls-fingerprints}

Section titled “TLS Fingerprints {#common-tls-fingerprints}”

TLS fingerprint categories for malicious client detection.

ValueDescription
TLS_FINGERPRINT_NONENo fingerprint matching
ANY_MALICIOUS_FINGERPRINTMatch any known malicious fingerprint
ADWAREAdware-associated fingerprints
DRIDEXDridex malware fingerprints
GOOTKITGootkit malware fingerprints
RANSOMWARERansomware-associated fingerprints
TRICKBOTTrickbot malware fingerprints

IP Threat Categories {#common-ip-threat-categories}

Section titled “IP Threat Categories {#common-ip-threat-categories}”

IP address threat categories for security filtering.

ValueDescription
SPAM_SOURCESKnown spam sources
WINDOWS_EXPLOITSWindows exploit sources
WEB_ATTACKSWeb attack sources
BOTNETSKnown botnet IPs
SCANNERSNetwork scanner IPs
REPUTATIONPoor reputation IPs
PHISHINGPhishing-related IPs
PROXYAnonymous proxy IPs
MOBILE_THREATSMobile threat sources
TOR_PROXYTor exit nodes
DENIAL_OF_SERVICEDoS attack sources
NETWORKKnown bad network ranges