Cloudflare - Account WAF Feature

[LukeDCDS]

Current Terraform and Cloudflare provider version

Terraform version 4.19.0

Description

There's no feature to add Account WAF to cloudflare accounts.

I think adding this will eliminate the need to reiterate through cloudflare zones via an array, provided the correct license is active

https://blog.cloudflare.com/account-waf/

Use cases

Using Account WAF to deploy a set of baseline rules across large number of zones.

Ease of use and deployment.

Potential Terraform configuration

# A hypothetical resource for managing Account WAF settings
resource "cloudflare_account_waf" "example" {
  account_id = var.account_id

  # Settings for the WAF configuration at the account level
  waf_settings {
    # Enable or disable WAF
    enabled = true

    # Action to take when a WAF rule is triggered
    default_action = "challenge"

    # Anomaly score threshold
    anomaly_score_threshold = 50

    # Configure individual rules or rule groups
    rule {
      id      = "100001"
      action  = "block"
      enabled = true
    }

    rule {
      id      = "100002"
      action  = "challenge"
      enabled = true
    }

    # Override settings for specific domains within the account
    domain_overrides {
      domain = "example.com"
      action = "simulate"
    }

    domain_overrides {
      domain = "anotherexample.com"
      action = "block"
    }
  }
}
...

References

No response

[github-actions]

Community Note

Voting for Prioritization

• Please vote on this issue by adding a 👍 reaction to the original post to help the community and maintainers prioritize this request.
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.

Volunteering to Work on This Issue

• If you are interested in working on this issue, please leave a comment.
• If this would be your first contribution, please review the contribution guide.

[jacobbednarz]

managing the WAF configuration at the account level is already supported through the cloudflare_ruleset resource.