mkol5222/cgwaftf2

01. Manage web app assets in CloudGuard WAF declarative

# manage based on YAML spec
# ./01-webapps/spec/assets.yaml
- name: one4x.klaud.online
  backend: https://one.one.one.one
- name: dev2.klaud.online
  backend: https://dev.to

# with defaults:
# ./01-webapps/spec/config.yaml
profile: saas-feb15
mode: Prevent

Inputs:

• POLICY_CLIENT_ID - Infinity Portral API key, application "Policy"
• POLICY_SECRET_KEY

Flow:

cd 01-webapps
cp terraform.tfvars.SAMPLE terraform.tfvars
# set API keys - Infinity Portal app Policy
code terraform.tfvars

terraform init
terraform apply -var publish=true -auto-approve

02. DNS records

# from project home
cd 02-dns
cp terraform.tfvars.SAMPLE terraform.tfvars
# set API keys
code terraform.tfvars

terraform init
terraform plan
terraform apply -auto-approve

03. WAF CLI to publish/enforce

unset GOPATH
export GOPATH=$HOME/go
go env | grep GOPATH
# export $(go env | grep GOPATH)
go install github.com/CheckPointSW/infinity-next-terraform-cli@latest
find "$GOPATH/bin"
$GOPATH/bin/infinity-next-terraform-cli
# INEXT_CLIENT_ID / INEXT_ACCESS_KEY
. ./.env.sh
$GOPATH/bin/infinity-next-terraform-cli -c $INEXT_CLIENT_ID -k $INEXT_ACCESS_KEY -r eu publish
$GOPATH/bin/infinity-next-terraform-cli -c $INEXT_CLIENT_ID -k $INEXT_ACCESS_KEY -r eu enforce

terraform apply -auto-approve -replace inext_access_token.access_token
$GOPATH/bin/infinity-next-terraform-cli -c $INEXT_CLIENT_ID -k $INEXT_ACCESS_KEY -r eu publish

terraform destroy
$GOPATH/bin/infinity-next-terraform-cli -c $INEXT_CLIENT_ID -k $INEXT_ACCESS_KEY -r eu publish