Jon Chery
0e6ecae26d
Rename all acdl-* AWS resources → nova-* across terraform (DynamoDB, Secrets Manager, Lambda, SNS, SG, KMS alias, ECS, ECR, IAM user/policy, state bucket, ALB, VPC/subnet names). Lambda default table names → nova-* (D-111). State bucket backend → nova-tfstate (-migrate-state documented). New docs/NOVA_AWS_MIGRATION.md runbook (staged migration + rollback). New scripts/migrate_dynamodb_data.py (scan+copy, dry-run default). acdl-deploy- → nova-deploy- role ARN in deploy workflows. Test fixtures updated; terraform validate + pytest + run_ci.sh PASS. ---ci--- project: acdl phase: 4 milestone: v1.15 status: execute ---/ci---
30 lines
617 B
Terraform
30 lines
617 B
Terraform
variable "name" {
|
|
type = string
|
|
description = "WAF Web ACL name."
|
|
default = "nova-waf"
|
|
}
|
|
|
|
variable "scope" {
|
|
type = string
|
|
description = "WAF scope (CLOUDFRONT or REGIONAL)."
|
|
default = "CLOUDFRONT"
|
|
}
|
|
|
|
variable "default_action" {
|
|
type = string
|
|
description = "Default action (allow or block)."
|
|
default = "allow"
|
|
}
|
|
|
|
variable "rules" {
|
|
type = any
|
|
description = "Custom WAF rules (list of rule objects)."
|
|
default = []
|
|
}
|
|
|
|
variable "region" {
|
|
type = string
|
|
description = "AWS region (provider-level; not a resource arg)."
|
|
default = null
|
|
}
|