- Global
- Updated various dependencies
-
Appsec
- Fixed a problem with the missing
security_policy_id
during update if a resource was imported previously. - Added the
akamai_appsec_aap_selected_hostnames
resource and data source. - Modified the
enable_botman_siem
field fromRequired
to theOptional
parameter in theakamai_appsec_siem_settings
resource.
- Fixed a problem with the missing
-
Cloud Access
- Added functionality to import the
akamai_cloudaccess_key
resource for specified group and contract IDs. - Marked the
cloud_secret_access_key
field as a sensitive value in theakamai_cloudaccess_key
resource (I#580).
- Added functionality to import the
-
CPS
- Refreshed a list of warnings returned by the
akamai_cps_warnings
data source.
- Refreshed a list of warnings returned by the
-
DNS
- Added the new
outbound_zone_transfer
field to theakamai_dns_zone
resource.
- Added the new
-
Edgeworkers
- Stopped sending an EdgeKV initialization request in the
akamai_edgekv
resource when EdgeKV is already initialized. (I#589)
- Stopped sending an EdgeKV initialization request in the
-
PAPI
- Added support for the new rule format
v2024-10-21
.
- Added support for the new rule format
-
Appsec
- Fixed a plug-in crash if the
exceptions
block is passed as empty in theakamai_appsec_siem_settings
resource.
- Fixed a plug-in crash if the
-
Cloud Access
- Resolved issues with drift detection after deleting a key version in the
akamai_cloudaccess_key
resource (I#579). - Fixed cases where ProcessingType = "FAILED" was received in a response from the
akamai_cloudaccess_key
resource. This was causing unnecessary pooling until the timeout.
- Resolved issues with drift detection after deleting a key version in the
-
GTM
- Added checks to verify the existence of specific objects on the server when creating these resources:
akamai_gtm_asmap
akamai_gtm_cidrmap
akamai_gtm_domain
akamai_gtm_geomap
akamai_gtm_property
akamai_gtm_resource
- Added checks to verify the existence of specific objects on the server when creating these resources:
-
PAPI
- Fixed an idempotency issue in property activation when
rule_errors
is empty. - Fixed an issue when timeout in the
akamai_property_activation
resource would terminate with theProvider produced inconsistent result after apply
error.- Changed a timeout message from a warning to an error in the
akamai_property_activation
andakamai_property_include_activation
resources.
- Changed a timeout message from a warning to an error in the
- Fixed an import of the
akamai_property_include
resource to properly populate the include'sproduct_id
field (I#575).
- Fixed an idempotency issue in property activation when
- Appsec
- Deprecated the
akamai_appsec_wap_selected_hostnames
data source and resource. Use theakamai_appsec_aap_selected_hostnames
data source and resource instead.
- Deprecated the
-
Global
- Migrated Terraform to version 1.9.5.
- Updated SDK v2 and framework libraries.
-
Appsec
- Added the
exceptions
block to theakamai_appsec_siem_settings
resource with these nested fields:api_request_constraints
apr_protection
bot_management
client_rep
custom_rules
ip_geo
malware_protection
rate
url_protection
slow_post
waf
- Added the
-
GTM
- Added the retry logic to the
akamai_gtm_property
resource to handle errors caused by the prolonged creation time, leading to Property Validation Failure with the "no datacenter is assigned to map target (all others)" error from the API.
- Added the retry logic to the
-
IAM
- Added new data sources:
akamai_iam_accessible_groups
- reads the groups and subgroups accessible for a given user.akamai_iam_account_switch_keys
- reads the account switch keys.akamai_iam_allowed_apis
- reads the list of APIs available to a given user.akamai_iam_authorized_users
- reads the list of authorized API client users.akamai_iam_blocked_properties
- reads blocked properties for a certain user in a group.akamai_iam_cidr_block
- reads details of a specified CIDR block.akamai_iam_cidr_blocks
- lists all CIDR blocks available to you on your allowlist.akamai_iam_group
- reads details about a given group and any of its subgroups.akamai_iam_password_policy
- reads the password policy parameters.akamai_iam_property_users
- lists users for a given property or include.akamai_iam_role
- reads details of a specified role.akamai_iam_user
- reads details of a specific user account.akamai_iam_users
- lists all users with access to your account.akamai_iam_users_affected_by_moving_group
- lists the users affected by moving a group.
- Added new resources:
akamai_iam_cidr_block
- manages CIDR block assigned to the allowlist.akamai_iam_ip_allowlist
- enables or disable your account's allowlist.
- Added new attributes to the
resource_akamai_iam_user
resource.user_notifications
to support user notifications.enable_mfa
to support authentication of type "MFA".password
to allow users to set a password when creating and updating a user.
- Made the
enable_tfa
attribute optional in theresource_akamai_iam_user
resource. - Added the
asset_id
schema field (an IAM identifier of a property or include) to:- The
akamai_property
resource and data source, - The
akamai_property_include
resource and data source.
- The
- Improved date handling to use
time.Time
instead ofstring
.
- Added new data sources:
-
PAPI
- Added a new optional param to the import id of the
akamai_edge_hostname
resource. It allows to specify the product ID of the imported hostname and save it in the state.
- Added a new optional param to the import id of the
- PAPI
- Added support for status code
429 Too Many Requests
containingX-RateLimit-Next
header. WhenX-RateLimit-Next
is present, the wait time before retry is calculated as the time difference between this header and theDate
header. - Fixed an issue with the
akamai_property_activation
resource where updating it with an active or previously active property version for a configuration without a state file didn’t trigger a new property activation.
- Added support for status code
- PAPI
- Deprecated fields
product_id
andrule_format
fromakamai_properties
datasource. Please useakamai_property
to fetch this data.
- Deprecated fields
-
Global
- Updated SDK v2 and framework libraries as a result of updating
terraform-plugin-testing
.
- Updated SDK v2 and framework libraries as a result of updating
-
Appsec
- Added the
request_body_inspection_limit_override
field to theakamai_appsec_advanced_settings_request_body
resource.
- Added the
-
CPS
- Added
acknowledge_post_verification_warnings
to theakamai_cps_dv_validation
resource to allow for acknowledgement of post-verification warnings
- Added
-
PAPI
- Added support for new rule format
v2024-08-13
- Added support for new rule format
-
Appsec
- Fixed import of
akamai_appsec_match_target
for newly created security configuration or any security configuration not synced in the terraform state (I#546) - Fixed issue where activation was not triggered after network list change in
resource_akamai_networklist_activations
resource (I#518) - Fixed
akamai_appsec_configuration
data source to return a single security configuration in the output_text instead of the entire list of security configurations
- Fixed import of
-
Cloudlets
- Corrected format of the retry time when logging in
akamai_cloudlets_application_load_balancer_activation
andakamai_cloudlets_policy_activation
resources
- Corrected format of the retry time when logging in
-
PAPI
- Fixed issue with provider producing an inconsistent final plan with Cloudlet policy (I#567). It happened in cases when content of the rule depends on some other resource
-
Migrated Go version to
1.21.12
for builds. -
Appsec
- Added field
host_names
to theakamai_appsec_configuration
data source
- Added field
-
BOTMAN
- Added new resource:
akamai_botman_content_protection_javascript_injection_rule
- read and updateakamai_botman_content_protection_rule
- read and updateakamai_botman_content_protection_rule_sequence
- read and update
- Added new data source:
akamai_botman_content_protection_javascript_injection_rule
- readakamai_botman_content_protection_rule
- readakamai_botman_content_protection_rule_sequence
- read
- Added new resource:
-
Client Lists
- Extended list of fields for which
akamai_clientlist_activation
diff is suppressed withnotification_recipients
andsiebel_ticket_id
. Diff suppressed when activation is not required.
- Extended list of fields for which
-
Cloud Access
- Added datasource:
akamai_cloudaccess_key
- read details for key by nameakamai_cloudaccess_keys
- read list of access key for current user accountakamai_cloudaccess_key_versions
- read details for key versions by key nameakamai_cloudaccess_key_properties
- read list of active properties for given access key
- Added resource:
akamai_cloudaccess_key
- create, read, update, delete, import
- Added datasource:
-
DNS
- Added data source:
akamai_zone_dnssec_status
- reads the DNSSEC status of a single zone in Edge DNS (I#509)
- Added data source:
-
GTM
- Added more details for
gtm_property
resource in case of error being returned from the API
- Added more details for
-
PAPI
- Added support for new rule format
v2024-05-31
- Added new optional field
ttl
toakamai_edge_hostname
resource. When it is used, creation or update takes longer as resource has to synchronize its state with HAPI.
- Added support for new rule format
-
Appsec
- A new config version will be created if the latest config version is active in either Staging or Production, and protected and/or evaluated hostnames are updated using
akamai_appsec_wap_selected_hostnames
(#I540) - Fixed issue where terraform provider plugin crashes due to empty string input for list
geo_network_lists
,ip_network_lists
,exception_ip_network_lists
andasn_network_lists
inakamai_appsec_ip_geo
resource
- A new config version will be created if the latest config version is active in either Staging or Production, and protected and/or evaluated hostnames are updated using
-
DNS
- Improved validation of IPv6 addresses in
akamai_dns_record
resource for records of typeAAAA
(I#550) - Fixed issue in
akamai_dns_record
resource that could cause incorrect targets planned to be modified or reordering targets send to server forTXT
record type (I#499, I#541, I#559) - Fixed issue in
akamai_dns_recordset
datasource that forTXT
record type, returned targets were needlessly reordered (I#559)
- Improved validation of IPv6 addresses in
-
PAPI
- Removed caching from
akamai_contracts
data source - Fixed issue in
akamai_edge_hostname
resource when update is performed straight after create - Fixed issue in data_akamai_property_rules_template that having root template in the same directory as .terraform dir would cause error. Now, datasource will not search for templates inside .terraform directory (I#557)
- Fixed an issue that caused the
compliance_record
in importedakamai_property_activation
andakamai_property_include_activation
to be empty and could not be updated.- Added the ability to update
compliance_record
inakamai_property_activation
andakamai_property_include_activation
via terraform apply (the update will not trigger new activation if version/network/property was not changed)
- Added the ability to update
- Fixed issue that having
akamai_property
andakamai_property_activation
(orakamai_property_include
andakamai_property_include_activation
) resources linked usingstaging_version
orproduction_version
and modifying rules and note could sometimes result inProvider produced inconsistent final plan
error (I#549).
- Removed caching from
-
Global
- Added validation for retryable logic values.
retry_max
orAKAMAI_RETRY_MAX
- Cannot be higher than 50retry_wait_min
orAKAMAI_RETRY_WAIT_MIN
- Cannot be longer than 24hretry_wait_max
orAKAMAI_RETRY_WAIT_MAX
- Cannot be longer than 24h
- Migrated Terraform to version 1.7.5
- Updated SDKv2 and framework libraries
- Added validation for retryable logic values.
-
Appsec
- Suppressed rate policy diff when
counterType
field absence is the only change forakamai_appsec_rate_policy
resource - Suppressed activations diff when
notification_emails
field is the only change forakamai_appsec_activations
resource
- Suppressed rate policy diff when
-
BOTMAN
- Added resource:
akamai_botman_custom_bot_category_item_sequence
- read and update
- Added resource:
-
Cloudlets
- Added import for
akamai_cloudlets_application_load_balancer_activation
resource
- Added import for
-
GTM
- Added data sources:
akamai_gtm_geomap
- reads information for a specific GTM Geographic mapakamai_gtm_geomaps
- reads information for GTM Geographic maps under a given domain
- Added data sources:
-
IAM
-
Fixed issue of generating an incorrect large difference in
granted_roles
update (I#525) -
Network Lists
- Suppressed activations diff when
notification_emails
field is the only change forakamai_networklist_activations
resource
- Suppressed activations diff when
-
PAPI
- Added retry logic for
akamai_property_include_activation
- Added import of the
certificate
forakamai_edge_hostname
resource (I#338) - NOTE: Certificate modification is not allowed.
- Added retry logic for
-
Appsec
- Resolved a drift issue with the
akamai_appsec_advanced_settings_attack_payload_logging
resource - Fixed an issue where resource
akamai_appsec_activations
continues in a loop after API throws an error. (#I528)
- Resolved a drift issue with the
-
CPS
- Fixed issue where modifications to SAN list in
akamai_cps_third_party_enrollment
of theakamai_cps_upload_certificate
resource results in to inconsistency terraform plan error.
- Fixed issue where modifications to SAN list in
-
DNS
- Fixed issue in
akamai_dns_record
that modifyingpriority
and/orpriority_increment
forMX
record type was causing an error
- Fixed issue in
-
GTM
- Fixed issue with order of
liveness_test
inakamai_gtm_property
(PR#404)
- Fixed issue with order of
- CPS
- Deprecated field
unacknowledged_warnings
ofakamai_cps_upload_certificate
resource.
- Deprecated field
-
DNS
- Added second mode to
akamai_dns_record
resource where it is possible to provide individual values for priority, weight and port to everySRV
target. In such case it is not allowed to provide values for resource level fieldspriority
,weight
andport
. It is not allowed to mix targets with and without those fields. (I#370)
- Added second mode to
-
Image and Video Manager
- Added support for
SmartCrop
transformation inakamai_imaging_policy_image
datasource
- Added support for
- CPS
- Fixed issue with terraform producing inconsistent final plan for
akamai_cps_upload_certificate
resource on SAN list modification inakamai_cps_third_party_enrollment
resource.
- Fixed issue with terraform producing inconsistent final plan for
-
General
- Migrated to terraform protocol version 6, hence minimal required terraform version is 1.0
-
PAPI
- Added validation to raise an error if the creation of the
akamai_edge_hostname
resource is attempted with an existing edge hostname. - Added validation to raise an error during the update of
akamai_edge_hostname
resource for the immutable fields: 'product_id' and 'certificate'.
- Added validation to raise an error if the creation of the
-
Global
- Requests limit value is configurable via field
request_limit
or environment variableAKAMAI_REQUEST_LIMIT
- Added retryable logic for all GET requests to the API.
This behavior can be disabled using
retry_disabled
field fromakamai
provider configuration or via environment variableAKAMAI_RETRY_DISABLED
. It can be fine-tuned using following fields or environment variables:retry_max
orAKAMAI_RETRY_MAX
- The maximum number retires of API requests, default is 10retry_wait_min
orAKAMAI_RETRY_WAIT_MIN
- The minimum wait time in seconds between API requests retries, default is 1 secretry_wait_max
orAKAMAI_RETRY_WAIT_MAX
- The maximum wait time in minutes between API requests retries, default is 30 sec
- Migrated to go 1.21
- Bumped various dependencies
- Requests limit value is configurable via field
-
Appsec
- Added resource:
akamai_appsec_penalty_box_conditions
- read and updateakamai_appsec_eval_penalty_box_conditions
- read and update
- Added new data source:
akamai_appsec_penalty_box_conditions
- readakamai_appsec_eval_penalty_box_conditions
- read
- Added resource:
-
CPS
- Added fields:
org_id
,assigned_slots
,staging_slots
andproduction_slots
todata_akamai_cps_enrollment
anddata_akamai_cps_enrollments
data sources
- Added fields:
-
Edgeworkers
- Improved error handling in
akamai_edgeworkers_activation
andresource_akamai_edgeworker
resources - Improved error handling in
akamai_edgeworker_activation
datasource
- Improved error handling in
-
GTM
- Added fields:
precedence
insidetraffic_target
inakamai_gtm_property
resource andakamai_gtm_domain
data sourcesign_and_serve
andsign_and_serve_algorithm
inakamai_gtm_domain
data source and resourcehttp_method
,http_request_body
,alternate_ca_certificates
andpre_2023_security_posture
insideliveness_test
inakamai_gtm_property
resource andakamai_gtm_domain
data source
- Added support for
ranked-failover
properties inakamai_gtm_property
resource - Enhanced error handling in
akamai_gtm_asmap
,akamai_gtm_domain
,akamai_gtm_geomap
,akamai_gtm_property
andakamai_gtm_resource
resources
- Added fields:
-
IMAGING
-
PAPI
- Added attributes to akamai_property datasource:
contract_id
,group_id
,latest_version
,note
,production_version
,product_id
,property_id
,rule_format
,staging_version
data_akamai_property_rules_builder
is now supportingv2024-02-12
rule format
- Added attributes to akamai_property datasource:
-
Appsec
- Fixed ukraine_geo_control_action drift issue (I#484)
-
Cloudlets
- Allowed empty value for match rules
json
attribute for data sources:akamai_cloudlets_api_prioritization_match_rule
akamai_cloudlets_application_load_balancer_match_rule
akamai_cloudlets_audience_segmentation_match_rule
akamai_cloudlets_edge_redirector_match_rule
akamai_cloudlets_forward_rewrite_match_rule
akamai_cloudlets_phased_release_match_rule
akamai_cloudlets_request_control_match_rule
akamai_cloudlets_visitor_prioritization_match_rule
- Allowed empty value for match rules
-
CPS
- Changed below fields from required to optional in
akamai_cps_dv_enrollment
andakamai_cps_third_party_enrollment
foradmin_contact
andtech_contact
attributes:organization
address_line_one
city
region
postal_code
country_code
- Changed below fields from required to optional in
-
PAPI
- Fixed case when
origin_certs_to_honor
field fromorigin
behavior mandates presence of emptycustom_certificate_authorities
and/orcustom_certificates
options insideorigin
behavior forakamai_property_rules_builder
datasource (I#515)
- Fixed case when
- Appsec
akamai_appsec_selected_hostnames
data source and resource are deprecated with a scheduled end-of-life in v7.0.0 of our provider. Use theakamai_appsec_configuration
instead.
-
Appsec
-
Cloudlets
- Added support for Shared Cloudlets Policies. To use it, provide
is_shared
field inakamai_cloudlets_policy
resource astrue
. (I#276) - Added validation to prevent changing immutable
cloudlet_code
field inakamai_cloudlets_policy
resource - Added support for importing policies without any version
- Added new data source:
akamai_cloudlets_policy_activation
- readakamai_cloudlets_shared_policy
- read
- Changes for
akamai_cloudlets_policy_activation
resource- Added support for shared (V3) policies
- Added import for
akamai_cloudlets_policy_activation
- Field
associated_properties
was changed to optional but is still required for non-shared policies - Added
is_shared
computed field to indicate if processing policy is shared
- Added support for Shared Cloudlets Policies. To use it, provide
-
DNS
- Enhanced handling of
akamai_dns_zone
resource when nogroup
is provided:- When there is only one group present, the processing should continue with a descriptive warning
- When there are more than one group present, the processing will fail with descriptive error asking to provide group in the configuration
- Enhanced handling of
-
Edgeworkers
- Added
note
attribute toresource_akamai_edgeworkers_activation
resource
- Added
-
GTM
- Added data sources:
akamai_gtm_asmap
- reads information for a specific GTM asmapakamai_gtm_resources
- reads information for a specific GTM resources under given domainakamai_gtm_resource
- reads information for a specific GTM resourceakamai_gtm_domain
- reads information for a specific GTM domainakamai_gtm_domains
- reads list of GTM domains under a given contractakamai_gtm_cidrmap
- reads information for a specific GTM cidrmap
- Added data sources:
-
IVM
- Extended
akamai_imaging_policy_image
with new fields:serve_stale_duration
available underpolicy
allow_pristine_on_downsize
andprefer_modern_formats
available underpolicy.output
- Extended
-
PAPI
- Added new resource:
akamai_property_bootstrap
- create, read, update and delete property without specifying rules or edgehostnames. To be used withakamai_property
resource and its new fieldproperty_id
(I#466)
- Added
version_notes
,rule_warnings
andproperty_id
attributes toakamai_property
resource (I#494) - Added support for new rule format v2024-01-09 in
data_akamai_property_rules_builder
- Improved errors for
akamai_contract
andakamai_group
datasources when there are multiple groups or contracts - Added
name
validation forakamai_property_include
resource
- Added new resource:
-
Updated various dependencies
-
Appsec
- Fixed provider plugin crash in
appsec_attack_group
andappsec_eval_group
after executing terraform plan (I#480) - Fixed drift for struct and list reordering in
akamai_appsec_match_target
- Fixed provider plugin crash in
-
Cloudlets
- Fixed handling of version drift for cloudlets policies (I#478)
-
CPS
- Changed
organizational_unit
insidecsr
attribute forakamai_cps_third_party_enrollment
andakamai_cps_dv_enrollment
resources from required to optional. (PR#513) - Changed
state
insidecsr
attribute forakamai_cps_third_party_enrollment
andakamai_cps_dv_enrollment
resources from required to optional.
- Changed
-
GTM
- Fixed 'Inconsistent Final Plan' error for
akamai_gtm_property
resource - The diff when reordering
traffic_target
inakamai_gtm_property
resource at the same time as changing any attribute value insidetraffic_target
will be extensive - Added
ForceNew
to thename
attribute forakamai_gtm_property
resource as it is not possible to rename it using API
- Fixed 'Inconsistent Final Plan' error for
-
Appsec
- Updated resource:
akamai_appsec_ip_geo
- addedasn_network_lists
attribute to support blocking by ASN client lists
- Updated data source:
akamai_appsec_ip_geo
- addedasn_network_lists
attribute to list ASN client lists
- Updated resource:
-
BOTMAN
- Added resource:
akamai_botman_custom_code
- read and update
- Added data source:
akamai_botman_custom_code
- read
- Cached api calls for
akamai_botman_akamai_bot_category
,akamai_botman_akamai_defined_bot
andakamai_botman_bot_detection
data sources to improve performance.
- Added resource:
-
Cloudlets
- Added
origin_description
field toakamai_cloudlets_application_load_balancer
resource
- Added
-
PAPI
- Behavior
restrict_object_caching
is public (I#314 and #277) - Added version support for
akamai_property_hostnames
data source (I#413) data_akamai_property_rules_builder
is now supportingv2023-10-30
rule format- Improved error handling and added retries in
akamai_property_activation
resource - Relaxed validation used for includes used in
akamai_property_rules_template
. Files cannot be empty but do not necessary have to be valid json files.
- Behavior
-
DNS
- Fixed handling of txt records which are longer than 255 bytes (I#430)
-
Image and Video Manager
- Added suppression when providing
ctr_
prefix inakamai_imaging_policy_set
(I#491)
- Added suppression when providing
-
Appsec
- Suppressed trigger of new activation for
note
field change inakamai_networklist_activations
andakamai_appsec_activations
resources.
- Suppressed trigger of new activation for
-
Client Lists
- Added support for state import for
akamai_clientlist_list
andakamai_clientlist_activation
resources
- Added support for state import for
-
Cloudlets
- Added
matches_alway
field toakamai_cloudlets_edge_redirector_match_rule
data source - Added configurable timeout for following resources as
timeouts.default
fieldakamai_cloudlets_application_load_balancer_activation
akamai_cloudlets_policy_activation
akamai_cloudlets_policy
- Added
-
CPS
- Added configurable timeout for following resources as
timeouts.default
field (I#440)akamai_cps_dv_enrollment
akamai_cps_dv_validation
akamai_cps_third_party_enrollment
akamai_cps_upload_certificate
- Added configurable timeout for following resources as
-
Edgeworkers
- Added configurable timeout for following resources as
timeouts.default
fieldakamai_edgekv_group_items
akamai_edgeworker
- Added configurable timeout for
akamai_edgeworkers_activation
resource astimeouts.default
andtimeouts.delete
fields
- Added configurable timeout for following resources as
-
IAM
- Phone number is no longer required for IAM user in
akamai_iam_user
resource.
- Phone number is no longer required for IAM user in
-
PAPI
- Added configurable timeout for following resources as
timeouts.default
field (I#440)akamai_property_activation
akamai_property_include_activation
akamai_edge_hostname
- Added configurable timeout for
akamai_cp_code
resource astimeouts.update
field - Changed
version
field inakamai_property_activation
data source to optional. Now whenversion
is not provided, datasource automatically finds the active one for given network. - Allowed empty values for some fields
in
akamai_property_builder
(I#481) - Added support for new rule format
v2023-09-20
- Added configurable timeout for following resources as
-
GTM
- Fixed problem with wrong datacenters updated in
akamai_gtm_property
.
- Fixed problem with wrong datacenters updated in
-
IAM
- Fixed Terraform proposing modifications to user settings when using international phone numbers in
akamai_iam_user
resource.- NOTE:
- For international phone numbers there might be a diff during plan. Please apply suggested change to store the correct number.
- Invalid phone numbers will block the plan.
- NOTE:
- Fixed Terraform proposing modifications to user settings when using international phone numbers in
-
PAPI
- Made
status_update_email
attribute optional inakamai_edge_hostname
resource
- Made
-
Appsec
- Added
sync_point
value inakamai_networklist_network_lists
data source
- Added
-
CPS
- Added
pending_changes
computed field toakamai_cps_enrollment
data source (#PR468)
- Added
-
Cloud Wrapper
- Added support for
comments
argument modification inakamai_cloudwrapper_configuration
resource
- Added support for
-
Appsec
- Fixed
akamai_networklist_network_list
import resulting in nullcontract_id
andgroup_id
- Fixed
-
PAPI
- Added errors to
data_property_akamai_contract
anddata_property_akamai_group
data sources, when fetching groups returns multiple inconclusive results - Fixed drift issue in
akamai_edge_hostname
resource (#457) - Added missing fields to
akamai_property_builder
fororigin
andsiteShield
behaviors (#465) - Improved
akamai_property_rules_builder
empty list transformation (#438)
- Added errors to
-
GTM
- Added better drift handling in
akamai_gtm_property
- when property is removed without terraform knowledge, resource doesn't just error on refresh but suggests recreation
- Added better drift handling in
-
[IMPORTANT] Cloud Wrapper
- Added resources:
akamai_cloudwrapper_activation
- activate cloud wrapper configuration, import cloud wrapper configuration activationakamai_cloudwrapper_configuration
- create, read and update cloud wrapper configuration
- Added data sources:
akamai_cloudwrapper_capacities
- reads capacities available for the provided contract IDsakamai_cloudwrapper_configuration
- reads configuration associated with config IDakamai_cloudwrapper_configurations
- reads all the configurationsakamai_cloudwrapper_location
- reads location for given location name and traffic typeakamai_cloudwrapper_locations
- reads all locationsakamai_cloudwrapper_properties
- reads properties associated with contract IDs with Cloud Wrapper entitlement
- Added resources:
-
[IMPORTANT] Client Lists
- Added resources:
akamai_clientlist_list
- create, update and delete Client Listsakamai_clientlist_activation
- activate a client list
- Added data source:
akamai_clientlist_lists
- reads Client Lists- Support filter by
name
and/ortypes
- Support filter by
- Added resources:
-
BOTMAN
- Added resource:
akamai_botman_custom_client_sequence
- read and update custom client sequence
- Added data source:
akamai_botman_custom_client_sequence
- reads custom client sequence
- Added resource:
-
PAPI
logStreamName
field fromdatastream
behavior has changed from string to array of strings for rule formatv2023-05-30
- PAPI
- Dropped too strict early snippet validation (#436)
- Fixed issue that
akamai_property
orakamai_property_include
would sometimes show strangenull -> null
diff inrules
(or droppingnull
in newer Terraform versions) even if no update actually is needed. If there is anything else changing in the rule tree, thenull -> null
will be also visible in the diff. That may be fixed in later time. - Fixed issue that
akamai_property_rules_builder
data source did not support PM variables for fields with validation based on regular expressions
-
Appsec
- Added resource:
akamai_appsec_security_policy_default_protections
- Added resource:
-
BOTMAN
- Added resource:
akamai_botman_challenge_injection_rules
- read and update
- Added data sources:
akamai_botman_challenge_injection_rules
- read
- Added resource:
-
PAPI
- Added verification to ensure that
akamai_property_rules_builder
data source has consistent frozen rule format between parent and it's child. Additionallyakamai_property_rules_builder.json
is returning artificial field_ruleFormat_
. - Suppressed trigger of new activation for
note
field change inakamai_property_activation
andakamai_property_include_activation
resources.
- Added verification to ensure that
-
Appsec
- deprecated following resources; use
akamai_appsec_security_policy_default_protections
resource instead:akamai_appsec_api_constraint_protection
akamai_appsec_ip_geo_protection
akamai_appsec_malware_protection
akamai_appsec_rate_protection
akamai_appsec_reputation_protection
akamai_appsec_slowpost_protection
- deprecated following resources; use
-
BOTMAN
- deprecated
akamai_botman_challenge_interception_rules
data source and resource; useakamai_botman_challenge_injection_rules
instead.
- deprecated
- Reinstated support for configuring provider with environmental variables (#407, #444)
- Fixed
signature does not match
error when usingconfig
block for authentication (#444, #446)
-
DataStream
- Changed the following data sources in DataStream 2 V2 API:
akamai_datastream_activation_history
- changed schema and corresponding implementations.akamai_datastream_dataset_fields
- changed parameter, schema and corresponding implementations.akamai_datastreams
- changed parameter, schema and corresponding implementations.
- Changed the following resources in DataStream 2 V2 API:
akamai_datastreams
- changed in schema payload, response attributes and corresponding implementations.
- Updated attribute names in
datastream.connectors
. - Updated methods in
datastream.stream
for the above changes.
- Changed the following data sources in DataStream 2 V2 API:
-
PAPI
- Changed default value of
auto_acknowledge_rule_warnings
tofalse
inakamai_property_activation
resource
- Changed default value of
-
Removed undocumented support for configuring provider with environment variables (
AKAMAI_ACCESS_TOKEN
,AKAMAI_CLIENT_TOKEN
,AKAMAI_HOST
,AKAMAI_CLIENT_SECRET
,AKAMAI_MAX_BODY
, and theirAKAMAI_{section}_xxx
equivalents). As an alternative users should now use provider's config block with TF_VAR_ envs when wanting to provide configuration through enviroment variables.
-
Appsec
notes
andactivate
fields inakamai_appsec_activations
resourceappsec_section
andappsec
fields in provider schema
-
CPS
enable_multi_stacked_certificates
field inakamai_cps_dv_enrollment
resource
-
DNS
dns_section
anddns
fields in provider schema
-
GTM
gtm_section
andgtm
fields in provider schema
-
IAM
is_locked
field inakamai_iam_user
resource
-
Network Lists
activate
field inakamai_networklist_activations
resourcenetworklist_section
andnetwork
fields in provider schema
-
PAPI
contract
andgroup
fields inakamai_cp_code
data sourcegroup
field inakamai_contract
data sourcename
andcontract
fields inakamai_group
data sourcecontract
,group
andproduct
fields inakamai_cp_code
resourcecontract
,group
andproduct
fields inakamai_edge_hostname
resourceproperty
andrule_warnings
fields inakamai_property_activation
resourcecontract
,group
andproduct
fields inakamai_property
resourcepapi_section
,property_section
andproperty
fields in provider schema
- PAPI
akamai_property_variables
-
Provider tested and now supports Terraform 1.4.6
-
Migrated
akamai_property_include
data source from SDKv2 to Framework. -
PAPI
- Added import to
akamai_property_activation
resource - Extended
akamai_property_rules_builder
data source: added support for rules frozen formatv2023-01-05
andv2023-05-30
- Added import to
-
Appsec
- Updated Geo control to include Action for Ukraine.
- Added
akamai_appsec_advanced_settings_pii_learning
data source and resource for managing the PII learning advanced setting.
- Deprecated
active
field inakamai_dns_record
resource
-
CPS
-
GTM
- Made
test_object
insideliveness_test
required only fortest_object_protocol
values:HTTP
,HTTPS
orFTP
(I#408)
- Made
-
Cloudlets
- Added wait for propagation of policy activation deletions, before removing the policy in
akamai_cloudlets_policy
(I#420)
- Added wait for propagation of policy activation deletions, before removing the policy in
-
PAPI
- Removed hostname validation on
akamai_property
resource (I#422)
- Removed hostname validation on
- GTM
- New data sources:
akamai_gtm_datacenter
- get datacenter informationakamai_gtm_datacenters
- get datacenters information
- New data sources:
-
Appsec
- Update malware policy
ContentTypes
to includeEncodedContentAttributes
. - Malware policy's
ContentTypes
is reported as part of an individual policy but is no longer included in the bulk report of all policies.
- Update malware policy
-
PAPI
- Remove
cpc_
prefix inakamai_cp_code
resource and data source IDs
- Remove
-
Migrate to Terraform 1.3.7 version
-
Akamai
- Reword returned error when reading edgerc configuration encounters problems (I#411)
-
EdgeWorkers
- Deactivate EdgeWorker versions upon EdgeWorker deletion(I#331)
-
PAPI
- Remove enforce
property-snippets
directory check (I#378) - Improved variable evaluation logic in
akamai_property_rules_template
data source (I#324, I#385, I#386)- Include path can now be provided using data source
variables
variables
can now reference each other and be used to build othervariables
e.g.${env.abc} = "${env.prefix} cba"
- Variables existence is now verified early across all snippets inside the snippets directory - if variable is used in a snippet which is not included in final template and the variable is not defined, the processing will fail (previously variables were verified only when the snippet was loaded into final result)
- Include path can now be provided using data source
- (Internal usage only) Improved
compliance_record
attribute's syntax forakamai_property_activation
andakamai_property_include_activation
- Remove enforce
-
Appsec
- Fixed issue that in some cases allowed
terraform plan
to create a new config version as a side-effect of reading the current config.
- Fixed issue that in some cases allowed
-
DNS
-
Cloudlets
- Fixed bug related to regex validation for handling property delay in
akamai_cloudlets_policy_activation
- Fixed sporadic issue with
akamai_cloudlets_policy_activation
due to network delay
- Fixed bug related to regex validation for handling property delay in
-
PAPI
- Fixed reading float values in
akamai_property_rules_builder
- Add validation for hostnames
cname_from
field inakamai_property
resource - Assign only active property activation version in
akamai_property_activation
resource on read
- Fixed reading float values in
- EdgeKV
- Added resource:
akamai_edgekv_group_items
- create, read, update, delete and import
- Added data sources:
akamai_edgekv_group_items
- reads group items associated with namespace and networkakamai_edgekv_groups
- reads groups associated with namespace and network
- Deprecated field
initial_data
underakamai_edgekv
resource
- Added resource:
-
Cloudlets
- In some cases
akamai_cloudlets_application_load_balancer_activation
orakamai_cloudlets_policy_activation
were not activating due to verification delay with property resource.
- In some cases
-
CPS
- Get CSR from long history (I#403)
-
GTM
- Deprecated field
name
oftraffic_target
underakamai_gtm_property
resource (I#374)
- Deprecated field
-
Image and Video Manager:
- Fixed diff in
akamai_imaging_policy_image
resource for image policy attributes (I#383):Breakpoints.Widths
Hosts
Output.AllowedFormats
Output.ForcedFormats
Variables
- Fixed diff in
akamai_imaging_policy_video
resource for video policy attributes:Breakpoints.Widths
Hosts
Variables
- Fixed diff seen in exported imaging policy set - removed default values
- Fixed diff in
-
PAPI
is_secure
andvariable
fields can only be used withdefault
rule inakamai_property_rules_builder
data source- Delete
product_id
from import ofakamai_edge_hostname
-
APPSEC
- Advanced Options Settings - New settings added for Request Size Inspection Limit
- Add data source
akamai_appsec_advanced_settings_request_body
- Add resource
akamai_appsec_advanced_settings_request_body
- Add data source
- Advanced Options Settings - New settings added for Request Size Inspection Limit
-
BOTMAN
- Cache OpenAPI calls to improve performance
-
Image and Video Manager
- Add
forced_formats
andallowed_formats
fields tooutput
field
- Add
-
PAPI
- Add data source
akamai_property_rules_builder
- create property rule trees directly from HCL (Beta).
- Add
compliance_record
forakamai_property_activation
resource
- Add data source
-
PAPI
- Fix issue when
akamai_property
imported an older version and during update it didn't create a new version from it
- Fix issue when
-
APPSEC
- Fix issue updating rule action for ASE AUTO policy
-
Various dependencies updated
-
Updated Akamai Terraform Provider examples to be compliant with current Akamai Terraform Provider version and
TFLint
-
APPSEC
- Advanced Options Settings - New settings added for Attack Payload Logging
- Added data source akamai_appsec_advanced_settings_attack_payload_logging
- Added resource akamai_appsec_advanced_settings_attack_payload_logging
- Advanced Options Settings - New settings added for Attack Payload Logging
- APPSEC
- Fix drift on
logFilename
element ofmalware_policy
- Prevent changes to
rate_policy
field of existingakamai_appsec_rate_policy_action
resource - Fix issue that disabled users from using all values allowed by the API in
akamai_appsec_rate_policy_action resource
resource
- Fix drift on
- PAPI
- Fix issue when
akamai_property_include_activation
broke during creation, Terraform could not recover - Fixed issue that
property_rules_template
data source failed with multiple includes in array (#387)
- Fix issue when
-
Support for Go 1.18
-
PAPI - Added data source for property activation
- akamai_property_activation - get activation by network
-
CPS
- Add
preferred_trust_chain
tocsr
attribute forakamai_cps_dv_enrollment
resource
- Add
-
GTM
- Fixed diff in resources:
resource_akamai_gtm_asmap
for fieldassignment.as_numbers
resource_akamai_gtm_cidrmap
for fieldassignment.blocks
resource_akamai_gtm_geomap
for fieldassignment.countries
resource_akamai_gtm_domain
for fieldemail_notification_list
resource_akamai_gtm_resource
for fieldresource_instance.load_servers
- Fixed diff in resources:
-
CPS
- Fixed terraform always showing diff for fields that use unicode characters (#368)
- PAPI
- Fix
rule_format
inakamai_property
to acceptlatest
- Fix
-
PAPI - Add support for Property Includes
- Added resources:
- akamai_property_include - create, read, update, delete and import
- akamai_property_include_activation - create, read, update, delete and import
- Added data sources:
- akamai_property_include_activation - get latest include activation by network
- akamai_property_include_parents - get property include parents information
- akamai_property_include_rules - get property include version rules information
- akamai_property_include - get property include version information
- akamai_property_includes - list property includes information
- Added resources:
-
APPSEC
- Add
json
attribute toakamai_appsec_security_policy
data source to allow obtaining policy name given its ID.
- Add
- APPSEC
- Fixed bug that prevented
akamai_appsec_ip_geo
resource from sending correct network lists inblock
mode. - Fixed bug that prevented
akamai_appsec_configuration
data source from reporting error correctly when a nonexistent configuration is specified.
- Fixed bug that prevented
- CPS
- New data sources:
- akamai_cps_csr - returns latest Certificate Signing Request for given enrollment
- akamai_cps_deployments - returns deployed certificates for given enrollment
- akamai_cps_warnings - returns a map of all possible CPS warnings (ID to warning message). The IDs can be later used to approve warnings (auto_approve_warnings field)
- Added resources allowing management of third-party enrollments:
- akamai_cps_third_party_enrollment - create, read, update, delete and import third-party enrollments
- akamai_cps_upload_certificate - create, read, update and delete
- Resource cps_dv_enrollment
- Deprecate
enable_multi_stacked_certificates
field. Now its value is alwaysfalse
.
- Deprecate
- New data sources:
- PAPI
- Fixed update of ip_behavior in
akamai_edge_hostname
resource (#354)
- Fixed update of ip_behavior in
- APPSEC
- Require network list sync point for network list activation (#326)
-
APPSEC
- Automatically activate network list when contents are modified
- Increase timeout for security configuration activation to 90 minutes (#348)
-
Datastream
- Added
akamai_datastreams
data source (#327) - Added new features to
akamai_datastream
resource- new connectors: Elasticsearch, NewRelic and Loggly
- Splunk and Custom HTTPS connectors were extended with ability to provide mTLS certificates configuration
- SumoLogic, Splunk and Custom HTTPS connectors were extended with ability to specify custom HTTP headers
- Added
-
APPSEC
- Fix incorrect payload sent by
akamai_appsec_ip_geo
resource in allow mode
- Fix incorrect payload sent by
-
Datastream
- Fixed problem with updating the configuration of the following connectors: Splunk, SumoLogic, Custom HTTPS, Datadog
-
GTM
- Fixed unreadable diff when single attribute is changed in traffic target
If upgrading to provider version 3.0.0 from an older version and using Akamai GTM Properties, you might see a switch of targets during the first apply. This is needed to get your terraform state in sync with our API, the following terraform plan/apply will not be affected
- Fixed unreadable diff when single attribute is changed in traffic target
-
IAM
- Update docs for following resources and datasources as they are no longer in Beta
akamai_iam_grantable_roles
akamai_iam_blocked_user_properties
akamai_iam_group
akamai_iam_role
- Update docs for following resources and datasources as they are no longer in Beta
-
Image and Video Manager
- Update docs for the sub-provider as it's no longer in Beta
- Botman
- Fix page header for the Botman Getting Started Guide.
-
[IMPORTANT] Added Bot Management API Support
- Added resources allowing management of:
akamai_bot_category_action
- read, update and importbot_analytics_cookie
- read, update and importbot_category_exception
- read, update and importbot_detection_action
- read, update and importbot_management_settings
- read, update and importchallenge_action
- create, read, update, delete and importchallenge_interception_rules
- read, update and importclient_side_security
- read, update and importconditional_action
- create, read, update, delete and importcustom_bot_cateogry
- create, read, update, delete and importcustom_bot_category_action
- read, update and importcustom_bot_category_sequence
- read, update and importcustom_client
- create, read, update, delete and importcustom_defined_bot
- create, read, update, delete and importcustom_deny_action
- create, read, update, delete and importjavascript_injection
- read, update and importrecategorized_akamai_defined_bot
- create, read, update, delete and importserve_alternate_action
- create, read, update, delete and importtransactional_endpoint_protection
- read, update and importtransactional_endpoint
- create, read, update, delete and import
- Added data sources:
akamai_bot_category
- list akamai bot categoriesakamai_bot_category_action
- list akamai bot category actionsakamai_defined_bot
- list akamai defined botsbot_analytics_cookie
- get bot analytics cookiebot_analytics_cookie_values
- list bot analytics cookie valuesbot_category_exception
- list bot category exceptionsbot_detection
- list bot detectionsbot_detection_action
- list bot detection actionsbot_endpoint_coverage_report
- get bot endpoint coverage reportbot_management_settings
- list bot management settingschallenge_action
- list challenge actionschallenge_interception_rules
- list challenge interception rulesclient_side_security
- get client side securityconditional_action
- list conditional actionscustom_bot_cateogry
- list custom bot categoriescustom_bot_category_action
- list custom bot category actionscustom_bot_category_sequence
- get custom bot category sequencecustom_client
- list custom clientscustom_defined_bot
- list custom defined botscustom_deny_action
- list custom deny actionsjavascript_injection
- get javascript injectionrecategorized_akamai_defined_bot
- list recategorized akamai defined botsresponse_action
- list response actionsserve_alternate_action
- list serve alternate actionstransactional_endpoint
- list transactional endpointstransactional_endpoint_protection
- read, update and import
- Added resources allowing management of:
-
APPSEC
- New data sources:
akamai_appsec_malware_content_types
- list available content types for malware protectionakamai_appsec_malware_policies
- list malware policiesakamai_appsec_malware_policy_actions
- list malware policy actions
- New resources:
akamai_appsec_malware_policy
- create, modify, or delete malware policiesakamai_appsec_malware_policy_action
- create, modify, or delete the actions associated with a malware policyakamai_appsec_malware_policy_actions
- create, modify, or delete the actions associated with one or more policies within a given security policyakamai_appsec_malware_protection
- enable or disable malware protection for a security policy
- New data sources:
-
EdgeWorkers
- New data sources (#331):
- akamai_edgeworker - returns data for specific edgeworker, corresponding version and bundle information
- akamai_edgeworker_activation - returns the latest activation in provided network
- Resources:
akamai_edgeworker_activation
- import
- New data sources (#331):
- GTM
- Fix diff for traffic_targets servers in
akamai_gtm_property
resource
- Fix diff for traffic_targets servers in
-
APPSEC
- Add notification_emails to activations resource
- Deprecate existing import functionality; use
cli-terraform export-appsec
instead.
-
CPS
- Extend
akamai_cps_dv_enrollment
withallow_duplicate_common_name
field - New data sources:
- akamai_cps_enrollment - returns data for specific enrollment
- akamai_cps_enrollments - returns data for all of a specific contract's enrollments
- Extend
-
Cloudlets
- Add missing cloudlet codes in Cloudlets documentation (#323)
-
EdgeWorker
- Fix EdgeWorker bundle hash calculation (#321)
-
GTM
- Fix diff for traffic_targets in
akamai_gtm_property
resource - Fix
akamai_gtm_domain
shows diff after import - Fix
akamai_gtm_resource
shows diff after import - Fix terraform import of
akamai_gtm_asmap
does not import assignments
- Fix diff for traffic_targets in
-
PAPI
-
APPSEC
- Added penalty box support for security policy in evaluation mode
-
IAM
- Extended
akamai_iam_user
:is_locked
field has been deprecated in favor oflock
- Added resources allowing management of:
akamai_iam_blocked_user_properties
- create, read, update and importakamai_iam_group
- create, read, update, delete and importakamai_iam_role
- create, read, update, delete and import
- Added data sources:
akamai_iam_grantable_roles
- list grantable rolesakamai_iam_timezones
- list supported timezones
- Extended
- APPSEC
- Fix drift in
EffectiveTimePeriod
,SamplingRate
,LoggingOptions
, andOperation
fields of custom rule resource. - Fix crash when eval rule API returns an error.
- Fix incorrect error report when activation API returns an error.
- Fix drift in
- Fix vulnerability for HashiCorp go-getter
-
Support for Darwin ARM64 architecture (GH#236)
-
Image and Video Manager
- New data sources:
akamai_imaging_policy_image
- generate JSON for image policyakamai_imaging_policy_video
- generate JSON for video policy
- Add
ImQuery
transformation - Add
Composite
transformation toPostBreakpointTransformations
- New data sources:
-
PAPI
- Update documentation for
akamai_property_rules_template
- Track remote changes in property rules (#305)
- Update documentation for
-
IAM
akamai_iam_user
: remove phone number validation, to allow international phone number format
- APPSEC
- Require version number for security configuration activation
- APPSEC
- Add tuning recommendations for eval rulesets
- Require security policy ID for bypass network list data source & resource
- PAPI
- Resource
akamai_property
: handle secure by default API errors
- Resource
-
Added Image and Video Manager Documentation
-
Include
terraform-provider-manifest
-
[IMPORTANT] Added Image and Video Manager API support
- Added resources allowing management of:
akamai_imaging_policy_image
- create, read, update, delete and importakamai_imaging_policy_set
- create, read, update, delete and importakamai_imaging_policy_video
- create, read, update, delete and import
- Added resources allowing management of:
-
CLOUDLETS
- Support for RC cloudlet type (Request Control)
-
PAPI
- Added support for update
akamai_cp_code
resource - Added data source:
akamai_properties_search
- list properties matching a specific hostname, edge hostname or property name
- Added support for update
-
Support for Go 1.17
-
DATASTREAM
- Fix ordering sensitivity for JSON based configuration (#287)
-
PAPI
- Fix CP code name forces replacement by adding update functionality in
akamai_cp_code
resource (#262)
- Fix CP code name forces replacement by adding update functionality in
-
Add metadata required by terraform registry
-
[IMPORTANT] Added EdgeWorkers and EdgeKV API support
- Added resources allowing management of:
- EdgeWorker and EdgeWorker activations:
akamai_edgeworker
- create, read, update, delete and import EdgeWorkerakamai_edgeworkers_activation
- create, read, update and delete EdgeWorker activations
- EdgeKV:
akamai_edgekv
- create, read, update, delete and import an EdgeKV namespace
- EdgeWorker and EdgeWorker activations:
- Added data sources for EdgeWorkers:
akamai_edgeworkers_resource_tier
- lists information about resource tiersakamai_edgeworkers_property_rules
- generates property rule and behavior to associate an EdgeWorker to a property
- Added resources allowing management of:
-
CLOUDLETS
- Support for AS cloudlet type (Audience Segmentation)
-
APPSEC
- Prevent 409 Conflict error caused by simultaneous network activation requests
- Allow updating network list activation without destroying and recreating
- Update unit tests to remove "NonEmptyPlanExpected" attribute
-
CPS
- Apply on resource
akamai_cps_dv_enrollment
is not idempotent if SANs contain common_name
- Apply on resource
-
APPSEC
- Cache OpenAPI calls for config & WAFMode information
- Allow separate resources for individual protection settings
-
CLOUDLETS
- ALB cloudlet activation: allow modification of the
network
field without destroying the existing activation - Policy activation: allow modification of the
network
field without destroying the existing activation
- ALB cloudlet activation: allow modification of the
-
CLOUDLETS
- Changed schema for
akamai_cloudlets_application_load_balancer
resource, to fix struct validation error during update phase - Fixed client side validation to allow a datacenter percentage of 0% in
akamai_cloudlets_application_load_balancer
resource
- Changed schema for
-
PAPI
- Fix error in
akamai_property_activation
resource, which was blocking rolling back to any previous property activation (#272)
- Fix error in
-
CLOUDLETS
- Support for VP cloudlet type (Visitor Prioritization)
- Support for CD cloudlet type (Continuous Deployment / Phased Release)
- Support for FR cloudlet type (Forward Rewrite)
- Support for AP cloudlet type (API Prioritization)
-
APPSEC
- Remove WAP-only datasource and resources
- Add support for Evasive Path Match feature
-
NETWORK LISTS
- Include contract_id & group_id in akamai_networklist_network_lists datasource
-
PAPI
- Add support for array type variables in akamai_property_rules_template (#257)
- DNS
- Refactored MX Bind processing and target suppress to fix failing import
- [IMPORTANT] Added Cloudlets API support
- Added resources allowing management of policy and policy activations:
akamai_cloudlets_policy
- create, read, update, delete and import policyakamai_cloudlets_policy_activation
- create, read, update and delete policy activations
- Added resources allowing management of application load balancer configuration and application load balancer activations:
akamai_cloudlets_application_load_balancer
- create, read, update, delete and import application load balancer configurationakamai_cloudlets_application_load_balancer_activation
- create, read, update and delete application load balancer activations
- Added data sources:
akamai_cloudlets_policy
- lists information about policyakamai_cloudlets_application_load_balancer
- lists information about application load balancer configurationakamai_cloudlets_application_load_balancer_match_rule
- lists information about application load balancer match rulesakamai_cloudlets_edge_redirector_match_rule
- lists information about edge redirector match rules
- Added resources allowing management of policy and policy activations:
- APPSEC
- Add group/contract ID support to network list resource (#243)
- Add tuning recommendations data source
- Add support for advanced exceptions in ASE rules
- Update WAP bypass network lists for multi-policy WAP
- Deprecate WAP-only datasource & resources
- PAPI
- Updated documentation for data source akamai_property_rules
- Allowed user to select a rule format in
resource akamai_property
- Added optional
use_cases
attribute forakamai_edge_hostname
resource
- Fixed example usage for provider import (#212)
- PAPI
- CPS
- Attribute
dns_challenges
should not be empty on initial apply forakamai_cps_dv_enrollment
resource (#253)
- Attribute
- DATASTREAM
- Attribute
dataset_fields_ids
should not be sorted numerically inakamai_datastream
resource (#263)
- Attribute
- GTM
- Attribute
datacenter_id
should be required inakamai_gtm_geomap
resource (#259)
- Attribute
- [IMPORTANT] DATASTREAM - Added DataStream configuration support
- New DataStream module. This module provides scalable, low latency streaming of property data in raw form
- New resource:
- akamai_datastream - create, read and update log streams
- New data sources:
- akamai_datastream_activation_history - list detailed information about the activation status changes for all versions of a stream
- akamai_datastream_dataset_fields - list groups of data set fields available in the template
- PAPI
- New akamai_property_rules_template data source, which lets you use JSON template files to configure a rule tree
- PAPI
- Handling
note
field during property deactivation
- Handling
- APPSEC
- Major documentation updates and clean up
- PAPI
- GRPC limit increased to 64MB (#220)
-
Terraform Plugin SDK updated to v2.7.0
-
Provider tested and now supports Terraform 1.0.4
-
APPSEC
- Add wap_selected_hostnames data source and resource
- Remove import templates for deprecated features
- Display policy IDs for siem settings in separate table
- Get an evaluation attack group's or risk score group's action
-
NETWORK LISTS
- Support contract_id and group_id for network list create/update
-
PAPI
- Possibility to set
note
field in property_activation resource - Additional checks and validations in
terraform plan
(#245)
- Possibility to set
- APPSEC
- Configuration drift on reputation_profile create/apply
- Fix incorrect comments/URL references in inline documentation
- Data source akamai_appsec_security_policy returning incorrect policy ID
- DNS
- Trim contract (ctr_) and group (grp_) prefixes when comparing configuration and TF state values (#242)
- GTM
- Trim contract (ctr_) and group (grp_) prefixes when comparing configuration and TF state values
- DNS
- Fixed contract id not being set in zone import and made group optional (#242)
- GTM
- Fixed documentation mismatch with optional/required fields on nested objects for
akamai_gmt_property
resource (#240)
- Fixed documentation mismatch with optional/required fields on nested objects for
- PAPI
- CPS
- Added
sans
field onakamai_cps_dv_validation
to enable resending acknowledgement on after SANS are updated
- Added
- CPS
akamai_cps_dv_enrollment
now acceptscontract_id
withctr_
prefix
- APPSEC
- Configuration version numbers are no longer supported for most data sources and resources, as described below.
- The following data sources are no longer supported:
- akamai_appsec_attack_group_actions
- akamai_appsec_attack_group_condition_exception
- akamai_appsec_eval_rule_actions
- akamai_appsec_eval_rule_condition_exception
- akamai_appsec_rule_actions
- akamai_appsec_rule_condition_exception
- The following resources are no longer supported:
- akamai_appsec_attack_group_action
- akamai_appsec_attack_group_condition_exception
- akamai_appsec_configuration_clone
- akamai_appsec_configuration_version_clone
- akamai_appsec_eval_rule_action
- akamai_appsec_eval_rule_condition_exception
- akamai_appsec_rule_action
- akamai_appsec_rule_condition_exception
- akamai_appsec_security_policy_clone
- akamai_appsec_security_policy_protections
- PAPI
- Fixed issue causing edgehostnames not being set properly in state intermittently
-
[IMPORTANT] CPS - Added Certificate Provisioning API support
- Added resources allowing management of DV enrollments:
- akamai_cps_dv_enrollment - create, read, update and delete DV enrollments
- akamai_cps_dv_validation - inform CPS of finished validation, track change status
- Added resources allowing management of DV enrollments:
-
APPSEC
- The provider now determines automatically the version number to use for data source and resource operations.
The most recent version of the specified configuration will be used if it is not currently active in either
staging or production. If the most recent version is currently active, that version will be cloned and the
newly cloned version will be used. The version attribute has been removed from all resource and data definitions,
with the exception of the following data sources:
- akamai_appsec_configuration_version
- akamai_appsec_export_configuration
- The export output templates supported by the akamai_appsec_export_configuration data source have been updated to remove version attributes.
- The functionality for cloning and renaming configurations and security policies has been integrated into
the respective resources. The separate resources for cloning and renaming have been removed. The affected
elements are listed in the
BREAKING CHANGES
section above. - The action and condition_exception functionality for rule, eval-rule and attack-group resources have been
consolidated into the respective data sources. The individual data sources and resources have been removed,
and the remaining ones have been renamed. The affected elements are listed in the
BREAKING CHANGES
section above. - The akamai_appsec_activation resource's ForceNew attribute is no longer supported.
- Resource updates that include modifications to the config_id or security_policy_id attributes are forbidden.
- The akamai_appsec_siem_setting resource's output_text attribute is no longer supported.
- The tabular output from the export_configuration data source has been improved.
- The sample configuration file in the source repository has been updated to standardize names and remove version attributes.
- Policy protections are now set individually. The separate resources for setting individual policy_protections resources has been removed.
- The Getting Started guide for Appsec has been updated to include more information on importing resources, including a list of the supported output templates.
- The following data sources have been added:
- akamai_appsec_advanced_settings_pragma_header
- akamai_appsec_attack_groups
- akamai_appsec_eval_rules
- akamai_appsec_rules
- The following resources have been added:
- akamai_appsec_advanced_settings_pragma_header
- akamai_appsec_api_constraints_protection
- akamai_appsec_attack_group
- akamai_appsec_eval_rule
- akamai_appsec_ip_geo_protection
- akamai_appsec_rule
- The provider now determines automatically the version number to use for data source and resource operations.
The most recent version of the specified configuration will be used if it is not currently active in either
staging or production. If the most recent version is currently active, that version will be cloned and the
newly cloned version will be used. The version attribute has been removed from all resource and data definitions,
with the exception of the following data sources:
-
PAPI
- New optional parameter, which allows to import a specific property version. Additional information in Property resource
-
APPSEC
- Suppress 'null' text on output of empty/false values
- Prevent configuration drift when reapplying configuration after importing or creating resources
- Update configuration version in local state file when modified in config.tf
- Use uppercase when managing GEO network list elements
- Display both API & website match targets in text_output
- Remove unused output_text from code and documentation
- Set network_list_id on network list import
- Add comments to simplify importing resources using "terraform import"
-
PAPI
- Fixed issue causing inconsistent state when activation has rule errors (#219)
- Fixed issue with
resource_akamai_property
not setting product_id during import (#224) - Rule warnings are not set in state anymore in
resource_akamai_property
andresource_akamai_property_activation
to address size concerns of state file. Users will still be able to see them in logs as warnings
-
DNS - Fix panic when zone already exists on create
-
GTM - Deprecate and ignore Property field static_ttl. Add warning if present in property resource config
- PAPI -
resource_akamai_property_activation
now allows new optional argumentauto_acknowledge_rule_warnings
. Refer to Property Activation Resource
- PAPI -
resource_akamai_property:
Changed hostnames field to a block type syntax to support additional user inputs. Refer to Property Resource for new syntax.
Important Note Existing terraform users with hostnames defined in older syntax need to manually fix their hostnames configuration and existing state if needed. Additional info in Property Resource
- PAPI
- Fixed issue with version attributes not being set properly (#208)
- Fixed issue with
data_akamai_property_rules_template
not interpolating#include
files properly - Fixed issue with
data_akamai_property_rules_template
not merging nested files properly
- PAPI
- New Hostnames Datasource to query hostnames and poll certificate status
- Improved error handling and error messages in
property
andproperty_activation
resources
These are the operations supported in the Network Lists API v2:
- Create a network list
- Update an existing network list
- Get the existing network lists, optionally filtering by name or type
- Subscribe to a network list
- Activate a network list
- PAPI - Fixed issue with rules causing advanced locked behaviors to fail
- PAPI
data_akamai_property_rules_template:
snippets files should now be placed underproperty-snippets
directory and should have.json
extension
- APPSEC
- Custom Deny
- SIEM Setting
- Advanced Options Settings
- API Match Target
- API Request Constraint
- Create/Delete/Rename Security Policy
- Host Coverage / Edit Version Notes
- All WAP Features / WAP Hostname Evaluation
- Create Security Configuration
- Rename Security Configuration Version
- Delete Security Configuration Version
- Clone Security Configuration
- Import tool for adding existing resources to Terraform state (#207)
- DNS
- Create SOA and NS Records on zone read if don't exist.
- Add HTTPS, SVCB record support
- GTM
- Add validation for property type and traffic targets combination
- PAPI
- Fixed issue causing hostnames to be appended instead of being replaced
- Fixed issue causing version and rule comments being dropped (#55)
- Fixed client side validation to allow certain PAPI errors to passthrough
- Fixed issue causing incorrect property version being stored in state for certain scenarios
- DNS
- Suppress NS Record target diff if old and new equal without trailing 'period' (#189)
- Fail on attempted Zone deletion. Not supported.
- PAPI -- Fixed crash caused by passing computed cpCode as a variable in rules to akamai_property
- PAPI -- Deprecated "product" attribute in akamai_cp_code resource and changed it "product_id"
These are the operations supported in the Identity Management: User Administration API v2:
- Create a new user
- Update a user's profile
- Update a user's role assignments
- Delete a user
- APPSEC - Documentation formatting fixes
- DDoS Protection -- Rate Policy & Action
- DDoS Protection -- Slowpost setting & Action
- Application Layer Protection -- Rule Action, Exceptions & Conditions
- Application Layer Protection -- Rule Evaluation Action, Exceptions & Conditions
- Application Layer Protection -- Attack Group Action, Exceptions & Conditions
- Application Layer Protection -- Rule Upgrade & Change Mode for Rule Eval
- Reputation Profile & Action
- Network Layer Control -- IP & GEO setting
- provider: configuring via an inline provider block (
property
,dns
, orgtm
) has been replaced with a more generalconfig
block that works the same way. - There are several breaking changes in the 1.0 release. You should consult the Migration guide for details.
- resources/akamai_property_activation no longer supports the following fields : activate. version has gone from being optional to being a required field.
- data-sources/akamai_property_rules removed in favor of using template JSON object to better work with other Akamai tools and documentation that is all JSON based.
- resources/akamai_property_variables removed in favor of directly managing the variable segment as part of ruletree object.
- resources/akamai_cp_code no longer auto-imports on create. If a conflict is detected will error out and to ignore simply import the resource.
- resources/akamai_edge_hostname no longer supports the following fields : ipv4, ipv6. The revised resource allows setting ip_behavior directly.
- resources/akamai_property no longer supports the following fields : cp_code, origin, variables, is_secure, contact. The revised resource simplifies the object structure and removes the ability to set the same value more than one way.
- provider/papi: changed attribute names in Provisioning to distinguish objects and names from id attributes. In prior releases, "group" could represent a name, an id, or sometimes both. This release distinguishes them with distinct attribute names "group_name", "group_id" instead of "group"."
- resources/akamai_property removing hostnames attribute can result in repeated noop update calls because in this case removal means the hostname relationships are un-managed leaving the attribute as empty is a better way to express this change.
- data-sources/akamai_properties added to list properties accessible to the user.
- data-sources/akamai_property_contracts added to list contracts accessible to the user.
- data-sources/akamai_property_groups added to list groups accessible to the user.
- data-sources/akamai_property_products added to list products associated with a given contract.
- data-sources/akamai_property_rule_formats added to list rule_formats.
- data-sources/akamai_property_rules changed to output the structure of a particular rule version on the server. NOTE: this is NOT the same as the deprecated datasource used for rule formatting.
- data-sources/akamai_rules_template added to handle file based JSON templating for rules tree data management
- resources/akamai_property_activation aliased property to property_id. Returns these additional attributes : target_version, warnings, errors, activation_id, and status
- provider: provider configuration validation requires an edgerc file configured and present even when environment variable-based configuration was used.
- provider: provider inline configuration support was re-introduced as a new config field.
- resources/akamai_property_activation activating and destroying activation for the same property multiple times in a row would fail on second destroy attempt and subsequent destroy attempts with "resource not found error" message.
- resources/akamai_property_activation wrong activation id read for property versions that had been activated and deactivated multiple time.
- resources/akamai_property aliased property to property_id. contract to contract_id, and product to product_id and account to account_id. Renamed version to latest_version.
- data-sources/akamai_contract aliased group to group_id and/or group_name.
- data-sources/akamai_cp_code aliased group to group_id and contract to contract_id.
- data-sources/akamai_group aliased name to group_name and contract to contract_id.
- provider: Added support for application security API
- provider: Updated edgegrid library to version 2.0.2. This should include the following fixes:
- Re-enabled global account switch key support in edgerc files for reseller accounts.
- PAPI - edgehostname updated returns - The System could not find cnameTo value
- PAPI - property update return error - You provided an Etag that does not represent the last edit. Another edit has occurred, so check your request again before retrying.
- Documentation formatting
- provider: provider configuration validation requires an edgerc file configured and present even when environment variable-based configuration was used.
- provider: support for configuring the provider via an inline provider block (
property
,dns
, orgtm
) no longer works. Users should use edgerc file or Terraform environment args to configure instead.
- provider: The backing edgegrid library was entirely rewritten. Provider behavior should be preserved but there is chance of incidental changes due to the project size.
- resources/akamai_edge_hostname: edge_hostname field should be provided with an ending of edgesuite.net, edgekey.net, or akamaized.net. If a required suffix is not provided then edgesuite.net is appended as default.
- provider: provider configuration validation requires an edgerc file configured and present even when one should not be needed.
- provider: support for configuring the provider via an inline provider block (
property
,dns
, orgtm
) no longer works. Users should use edgerc file or Terraform environment args to configure instead.
- provider: improved error handling and improved message consistency
- provider: release notes categorize updates according to Terraform best practices guide.
- resources/akamai_cp: support ids with and without prefixes
- resources/akamai_edge_hostnames: support ids with and without prefixes
- resources/akamai_property: support ids with and without prefixes
- resources/akamai_property_activation: support ids with and without prefixes
- resources/akamai_property: [AT-42] Fix criteria_match values handling
- provider: fixed documentation to properly present guides and categories on Hashicorp Terraform registry site
- resources/edge_hostname: added error when neither IPV4 nor IPV6 is selected
- resources/akamai_property: comparisons in rule tree now properly ignore equivalent values with attribute order differences.
- data-sources/akamai_property_rules: comparisons in rule tree now properly ignore equivalent values with attribute order differences.
- provider: updated all error messages to better identify issues and actions required by user
- provider: fixed crash due to unexpected data types from unexpected API responses
- provider: fixed crash due to unexpected data types in Terraform files
- provider: errors now get reported using Terraform diagnostics allowing much more detail to be passed to user when an error occurs.
- [IMPORTANT] Dropped support for TF clients <= 0.11. Provider now built using Terraform sdk v2 library. Terraform dropped 0.11 client support as part of this update. This change will make many new enhancements possible. (See: Terraform v2 sdk)
- resources/akamai_group: contract field (previously optional) now required to ensure contract and group agreement.
- [CHANGE] Individual edgerc file sections for different Akamai APIs (i.e.,
property_section
,dns_section
) has been deprecated in favor a commonconfig_section
used in conjunction with provider aliases (See: Multiple Provider Configurations)
- provider: provider configuration validation requires an edgerc file configured and present even when one should not be needed.
- provider: support for configuring the provider via an inline provider block (
property
,dns
, orgtm
) no longer works. Users should use edgerc file or Terraform environment args to configure instead.
- [FIX] datasource akamai_group will no longer panic when contract not provided
- [ADD] Project re-organized to prepare for additional APIs to be included
- Fixed build job to compile sub-modules. Code is identical to 0.9.0 release
- [IMPORTANT] This build did not compile all modules properly so use 0.9.1 above instead.
- Initial release via the Terraform Registry. Otherwise identical to 0.8.1 release
- [FIX] Activation is executed, even without changes #139 (
akamai-property-activation
) (#139) - [FIX] Cannot find group when there are groups with the same name under multiple contract. #168 (
akamai-property-group
) (#168)
- [FIX] Corrected Error 401 [Signature does not match] during new primary zone creation (
akamai-dns
) (#163) - [ADD] Updated Getting Started Primary Zone creation description. Added FAQ for Primary zone (
akamai-dns
) - [FIX] SRV record priority value of 0 not allowed (
akamai-dns
) (#165) - [ADD] Initial support for correlation ID in logging (
akamai-property
)
- [FIX] Corrected AAAA record handling of short and long IPv6 notation (
akamai-dns
)
- [FIX] Error after upgrading to 0.7.0 regarding MX records (
akamai-dns
) (#154) - [FIX]Error 422 on SOA Record Apply After Creating a Primary Zone (
akamai-dns
) (#155)
- [ADD] User Agent support for Terraform version and provider version and SDK update
- [FIX] Bugs in Zone Create and Exists (
akamai_dns
) (#151)
- [ADD] Support the creation of DNS records of type AKAMAICDN (
akamai_dns
) (#53) - [ADD] Support akamai_dns_record Import (
akamai_dns
) (#69) - [FIX] Cannot remove a backup_cname from GTM property (
akamai_gtm
) (#124) - [ADD] DNS Alias Zone Support (
akamai_dns
) (#125) - [ADD] DNS TSIG Key support (
akamai_dns
) (#126) - [ADD] DNS SOA, AKAMAITLC Record Support (
akamai_dns
) (#127) - [FIX] Inverted Parameters - DNS Record Type NAPTR (
akamai_dns
) (#130) - [FIX] Inverted Parameters - DNS Record Type NSEC3 (
akamai_dns
) (#131) - [FIX] Inverted Parameters - DNS Record Type NSEC3PARAM (
akamai_dns
) (#132) - [FIX] Inverted Parameters - DNS Record Type RRSIG (
akamai_dns
) (#133) - [FIX] Inverted Parameters - DNS Record Type DS (
akamai_dns
) (#134) - [ADD] DNS CAA, TLSA, CERT Record Support (
akamai_dns
) (#148)
- [FIX] Release edgehostnames and products caching edge library v0.9.10 (
akamai_property
)
- [FIX] Release contract group and cpcode caching edge library v0.9.9 (
akamai_property
)
- [FIX] Provider produced inconsistent final plan #88 add contract group and cpcode caching edge library v0.9.9 (
akamai_property
) (#88)
- [FIX] Bug - Origin values customhostheader #93 (
akamai_property
) (#93) - [FIX] akamai 0.1.5 - err: rpc error: code = Unavailable desc = transport is closing #87 (
akamai_property
) (#87) - [FIX] Errors in documentation: akamai_contract and akamai_cp_code #52 (
akamai_property
) (#52) - [FIX] Provider produced inconsistent final plan #88 (
akamai_property
) (#88) - [FIX] akamai_property_activation creation crashing with Error: rpc error: code = Unavailable desc = transport is closing #102 (
akamai_property
) (#102) - [ADD] Add Support for GTM domains and contained elements (domain, datacenter, property, resource, cidrmap, geographicmap, asmap)
- [FIX] Criteria is always end up using must satisfy "all" (
akamai_property
) (#81) - [FIX] Provider produced inconsistent final plan (
akamai_property_variables
) (#82) - [FIX] Cannot create multiple types of records with the same name (
akamai_dns_record
) (#11) - [FIX] akamai_property_activation resource - changing network field causes deactivation of version in staging (
akamai_property_activation
) (#51) - [FIX] Multiple MX records creation issue (
akamai_dns_record
) (#57)
- [FIX] Add support for update of rules state (
akamai_property
) (#66) - [FIX] Add support for masters being optional (
akamai_dns_zone
) (#61) - [FIX] Create edge hostname 400 error Bad Request Request parameter Slot Number (
akamai_property
) (#56) - [FIX] TXT record - State update failure due to sha verification issue (
akamai_dns_zone
) (#58)
- [FIX] Correct ordering of values for
SRV
records (akamai_dns_record
) (#17) - [FIX] IPV4-only hostnames no longer fail (
akamai_edge_hostname
) (#21) - [FIX] Don't try to deactive any version but the current one (
akamai_property_activation
) (#21) - [FIX] Fix crash in DNS record validation (#27)
- [FIX] SiteShield behavior translated correctly to JSON (#10] [#40)
- [FIX] Property rules correctly update (all rules now removed correctly) (#30)
- [FIX] Property Hostnames correctly update (all hostnames are now removed correctly) (#44)
- [FIX] Property activation was using the activation ID to fetch the property (#35)
- [FIX] Ensure property supports
is_secure
for Enhanced TLS (#42) - [FIX] Multiple fixes to provider configuration for auth configuration. (#46)
- [FIX] Ensure the latest version is activated when no
akamai_property_activation.version
is set (#45) - [FIX] Multiple records (e.g. using
count
) should now be created correctly (#11) - [CHANGE]
akamai_property_rules
has been changed to a data source to ensure dependant resources update correctly, the existing resource now emits an error in all operations (#47) - [ADD] Make zone type (primary or secondary) case-insensitive (#29)
- [FIX] Fixed handling of CPCode behavior in rules.json
- [FIX] Fixed hostname complexity, now a simple
{"public.host" = "edge.host"}
map - [FIX] Fixed accidental deactivations
- [ADD] Added explicit property and dns credential blocks to provider config
- [ADD] Added better validation to
akamai_dns_record
- [FIX] Bug fixes
- Initial release