Deploying Wallarm on AWS using Terraform¶

Wallarm provides the Terraform module to deploy the node to AWS from the Terraform-compatible environment. Use these instructions to explore the module and try the provided deployment examples.

By implementing the Wallarm Terraform module, we have provided the solution enabling two core Wallarm deployment options: in-line (which is proxy in this deployment method) and Out‑of‑band (mirror) security solutions. The deployment option is easily controlled by the preset Wallarm module variable.

Use cases¶

Among all supported Wallarm deployment options, Terraform module is recommended for Wallarm deployment in these use cases:

• Your existing infrastructure resides on AWS.

• You leverage the Infrastructure as Code (IaC) practice. Wallarm's Terraform module allows for the automated management and provisioning of the Wallarm node on AWS, enhancing efficiency and consistency.

Requirements¶

• Terraform 1.0.5 or higher installed locally

• Access to the account with the Administrator role in Wallarm Console in the US or EU Cloud

• Access to https://us1.api.wallarm.com if working with US Wallarm Cloud or to https://api.wallarm.com if working with EU Wallarm Cloud. Please ensure the access is not blocked by a firewall

• Access to the IP addresses below for downloading updates to attack detection rules and API specifications, as well as retrieving precise IPs for your allowlisted, denylisted, or graylisted countries, regions, or data centers

  US CloudEU Cloud

  34.96.64.17
  34.110.183.149
  35.235.66.155
  

  34.160.38.183
  34.144.227.90
  34.90.110.226
  

This topic does not include instructions for creating all AWS resources necessary to deploy Wallarm, such as a VPC cluster. For details, refer to the relevant Terraform guide.

How to use the Wallarm AWS Terraform Module?¶

To deploy Wallarm for production using the AWS Terraform module:

1. Sign up for Wallarm Console in the US Cloud or EU Cloud.

2. Open Wallarm Console → Nodes and create the node of the Wallarm node type.

   

3. Copy the generated node token.

4. Add the wallarm module code to your Terraform configuration:

   module "wallarm" {
     source = "wallarm/wallarm/aws"
   
     instance_type = "..."
   
     vpc_id     = "..."
   
     preset     = "proxy"
     proxy_pass = "https://..."
     token      = "..."
   
     ...
   }
   

5. Set variable values in the wallarm module configuration:

Trying Wallarm Terraform Module with examples¶

We have prepared examples of different ways to use the Wallarm module, so you could try it before deploying it to production:

• Proxy in AWS VPC

• Proxy for Amazon API Gateway

• OOB for NGINX, Envoy or Similar Mirroring

Further information about Wallarm and Terraform¶

Terraform supports a number of integrations (providers) and ready-to-use configurations (modules) available to users via the public registry, populated by a number of vendors.

To this registry, Wallarm published:

• The Wallarm module to deploy the node to AWS from the Terraform-compatible environment. Described in the current article.

• The Wallarm provider for managing Wallarm via Terraform.

These two are an independent elements used for different purposes, do not require each other.

Limitations¶

• Credential stuffing detection is currently unsupported

Was this page helpful?

How can we improve this article? (Optional)

Information is unclear or confusing

Insufficient information

Outdated or incorrect information

0/240

Send