Terraform module for WafCharm IAM Role - creates IAM role and policies required for WafCharm integration

Note: This module supports WafCharm New Plan with AWS WAF v2 Advanced Rule Policy only.

The following configurations are not supported:

• AWS WAF Classic (only available with Legacy Plan, cannot migrate to New Plan)
• AWS WAF v2 + Legacy Rule Policy (requires multiple credentials and Lambda integration)
• WafCharm Lite (separate product used with CSC Managed Rules)

For more details on WafCharm plans and rule policies, see:

• Differences between Advanced Rule Policy and Legacy Rule Policy

module "wafcharm" {
  source = "github.com/topotal/terraform-aws-wafcharm"

  env                          = "production"
  wafcharm_trusted_account_ids = ["123456789012"]  # From WafCharm console
  wafcharm_external_ids        = ["your-external-id"]  # From WafCharm console
  waf_log_bucket_arn           = "arn:aws:s3:::aws-waf-logs-your-bucket"

  tags = {
    Environment = "production"
  }
}

No modules.