F5 Distributed Cloud (XC) Application Security with Terraform

The popularity and growth of infrastructure as a code (IaC) in the last couple of years has been a market trend that has impacted how we manage and implement the infrastructure.  It makes consuming, expanding, migrating, and shutting down services easy. Since developers are more comfortable writing code, the advantage of IaC is that it puts the infrastructure specifications into code without the barrier of acquiring new skills or knowledge. With Terraform providers for F5, you can use automation to create, change, and version your infrastructure with ease and efficiency.

With F5 Distributed Cloud WAAP, organizations can simplify their path to adequate security without sacrificing continued business innovation and customer demand. Reduce the number of point solutions and centralize security management and policy enforcement across distributed environments.

This lab environment highlights one of the core principles of F5 Distributed Cloud (XC).

• You will be guided and tasked to create an F5 XC-protected application.
• You will use Hashi Corp Terraform to validate and deploy a simple WAF and Bot-protected application.
• This application will be deployed automatically in AWS but can be used in any cloud environment.
• You will explore the User Interface to see the protected application in real-time as it blocks malicious traffic.

The goal of this lab is to show how easy it is to protect your existing environment with F5 Distributed Cloud using Hashi Corp's Terraform.

• F5 Distributed Cloud (XC)
  • Web App and API Protection (WAAP) from XC
• AWS EC2
• AWS Elastic Load Balancer
• Terraform - 12.9
  • Providers - volterraedge/volterra