# terraform-aws-waf

Terraform for shared AWS WAF ACLs.

The repository root contains the module for provisioning ACLs.

## Naming Conventions

* Each AWS account has its own module within the `logging` folder for managing the WAF logs bucket
* Each AWS account has its own top-level module for managing the WAF ACLs
  * For application accounts:
      * `environment` is one of `dev`, `qa` or `prod`
  * For shared infrastructure accounts:
      * `environment` is the name of the account, e.g. `networking`

## 1.5.0 Upgrade
Please be aware that since version 1.5.0 the module creates a logging configuration alongside with the waf itself. If you are upgrading there is a high chance that the `aws_wafv2_web_acl_logging_configuration` has been already defined. In this case, please remove the existing `aws_wafv2_web_acl_logging_configuration` configuration - the module will create a new `aws_wafv2_web_acl_logging_configuration` resource with logging destination in the shared AWS account.