Akamai WAF
Use the Akamai WAF integration to manage common sets of lists used by various Akamai security products and features. This is the modified version where a new command "akamai-update-network-list-elements" was added by the SA.
Network Security · Akamai WAF
Configuration parameters
host— Server URL (e.g., https://example.net) (required)clientToken— Client tokenaccessToken— Access tokenclientSecret— Client secretcredentials_client_token—credentials_access_token—credentials_client_secret—insecure— Trust any certificate (not secure)proxy— Use system proxy settings
Commands (92)
-
akamai-acknowledge-pre-verification-warningacknowledge pre verification warning.
-
akamai-acknowledge-warning-commandAcknowledge the warning message for uploading the certs and trust chains of enrollments.
-
akamai-activate-appsec-config-versionAppSec activate appsec configuration version.
-
akamai-activate-client-listActivates a client list.
-
akamai-activate-network-listDeprecatedDeprecated. Use “akamai-activate-client-list” instead.
-
akamai-activate-papi-propertyActivate a PAPI property.
-
akamai-add-client-list-entryAdds one or more entries to a client list.
-
akamai-add-elements-to-network-listDeprecatedDeprecated. Use “akamai-add-client-list-entry” instead.
-
akamai-add-papi-property-hostnameAdd hostnames to the PAPI property.
-
akamai-cancel-cps-changeCancels a pending change on CPS.
-
akamai-check-groupCheck an existing group within the context of your account.
-
akamai-clone-appsec-config-versionAppSec_clone appsec config version.
-
akamai-clone-papi-propertyClone a new PAPI property.
-
akamai-clone-security-policyAppSec clone security policy.
-
akamai-create-client-listCreates a new client list.
-
akamai-create-datacenterCreate a data center.
-
akamai-create-domainCreate a domain with properties and domain controller (DC).
-
akamai-create-enrollmentCreate a new enrollment.
-
akamai-create-groupCreate a new group under a parent GID.
-
akamai-create-network-listDeprecatedDeprecated. Use “akamai-create-client-list” instead.
-
akamai-deactivate-client-listDeactivates a client list.
-
akamai-delete-datastreamDeletes a deactivated stream. Deleting a stream means that you can't activate this stream again, and that you stop receiving logs for the properties that this stream monitors. Before deleting any stream, you need to deactivate it first. See Deactivate a stream.
-
akamai-delete-network-listDeprecatedDeprecated. Use “akamai-deprecate-client-list” instead.
-
akamai-deprecate-client-listDeprecates a client list.
-
akamai-generic-api-call-commandAkamai Generic API Call.
-
akamai-get-appsec-config-activation-statusAppSec get appsec config activation status.
-
akamai-get-appsec-config-latest-versionAppSec get appsec config latest version.
-
akamai-get-changeGet the CPS code.
-
akamai-get-change-historyGet change history.
-
akamai-get-client-listGet a client list.
-
akamai-get-client_listsGet accessible client lists.
-
akamai-get-contract-groupGet contract groups.
-
akamai-get-cps-change-statusGets the status of a pending change.
-
akamai-get-cps-enrollment-by-idGet an enrollment in CPS by enrollment id.
-
akamai-get-cps-enrollment-deploymentReturns the certification/enrollment deployment status for specific a environment: production or staging.
-
akamai-get-cps-enrollmentid-by-cnnameGet cps certificate enrollment ID by common name.
-
akamai-get-datastreamReturns information about any version of a stream, including details about the monitored properties, logged data set fields, and log delivery destination. If you omit the version query parameter, this operation returns the last version of the stream.
-
akamai-get-domainGet a specific GTM domain.
-
akamai-get-domainsGet Google Tag Manager (GTM) domains.
-
akamai-get-enrollment-by-cnGet enrollment by common name.
-
akamai-get-groupGet group.
-
akamai-get-network-list-activation-statusDeprecatedDeprecated. There is no replacement for this command.
-
akamai-get-network-list-by-idDeprecatedDeprecated. Use “akamai-get-client-list” instead.
-
akamai-get-network-listsDeprecatedDeprecated. Use “akamai-get-client-list” instead.
-
akamai-get-papi-edgehostname-creation-status-commandGet PAPI edgehostname creation status command until it is created.
-
akamai-get-papi-property-activation-status-commandGet PAPI property activation status until it is active.
-
akamai-get-papi-property-by-idget papi property info by id without default rule. to get default rule, please use "get-papi-property-rule" command.
-
akamai-get-papi-property-by-nameGet PAPI property info without the default rule. To get the default rule, use the "get-papi-property-rule" command.
-
akamai-get-papi-property-ruleget papi property rule json and dump into string.
-
akamai-get-production-deploymentGet Production Deployment.
-
akamai-get-security-policy-id-by-nameAppSec get security policy ID by name.
-
akamai-list-appsec-configLists available security configurations. Products: All.
-
akamai-list-appsec-configuration-activation-historyLists the activation history for a configuration. The history is an array in descending order of submitDate. The most recent submitted activation lists first. Products: All.
-
akamai-list-cidr-blocksList all CIDR blocks for all services you are subscribed to. To see additional CIDR blocks, subscribe yourself to more services and run this operation again.
-
akamai-list-cps-active-certificatesLists enrollments with active certificates. Note that the rate limit for this operation is 10 requests per minute per account.
-
akamai-list-datastream-groupsReturns access groups with contracts on your account. You can later use the groupId and contractId values to create and view streams or list properties by group. Set the contractId query parameter to get groups for a specific contract.
-
akamai-list-datastream-properties-bygroupGet properties that are active on the production and staging network and available within a specific group. Run this operation to get and store the propertyId values for the Create a stream and Edit a stream operations.
-
akamai-list-datastreamsReturns the latest versions of the stream configurations for all groups within the account.
-
akamai-list-dns-zone-recordsetsLists all record sets for this zone. It works only for PRIMARY and SECONDARY zones.
-
akamai-list-dns-zonesList all zones that the current user has access to manage.
-
akamai-list-edgehostnameLists all edge hostnames available under a contract.
-
akamai-list-enrollmentsList enrollments of a specific contract.
-
akamai-list-groupsLists groups of Akamai.
-
akamai-list-idam-propertiesLists the properties and includes for the current account.
-
akamai-list-papi-property-activationsThis lists all activations for all versions of a property, on both production and staging networks.
-
akamai-list-papi-property-by-groupLists properties available for the current contract and group.
-
akamai-list-papi-property-by-hostnameLists active property hostnames for all properties available in an account.
-
akamai-list-siteshield-mapReturns a list of all Site Shield maps that belong to your account.
-
akamai-modify-appsec-config-selected-hostsUpdate the list of selected hostnames for a configuration version.
-
akamai-new-datastreamCreates a stream configuration. Within a stream configuration, you can select properties to monitor in the stream, data set fields to collect in logs, and a destination to send these log files to. Get the streamId value from the response to use in the https://{hostname}/datastream-config-api/v2/log/streams/{streamId} endpoint URL. Apart from the log and delivery frequency configurations, you can decide whether to activate the stream on making the request or later using the activate parameter. Note that only active streams collect and send logs to their destinations. NOTE: "SPLUNK" and "HTTPS" are the only two types tested.
-
akamai-new-match-targetAppSec create match target.
-
akamai-new-or-renew-match-targetNew match target if no existing found otherwise update the existing match target hostnames. If there are multiple match targets found, the first one in the list will be updated.
-
akamai-new-papi-cpcodeCreate a new PAPI CP code.
-
akamai-new-papi-edgehostnameAdd a PAPI edge hostname.
-
akamai-new-papi-property-versionCreate a new property version based on any previous version. All data from the createFromVersion populates the new version, including its rules and hostnames.
-
akamai-patch-datastreamUpdates selected details of an existing stream. Running this operation using JSON Patch syntax creates a stream version that replaces the current one. Currently you can patch a stream using only the REPLACE operation. When updating configuration objects such as destination or deliveryConfiguration, pass a complete object to avoid overwriting current details with default values for omitted members such as tags, uploadFilePrefix, and uploadFileSuffix. Note that only active streams collect and send logs to their destinations. You need to set the activate parameter to true while patching active streams, and optionally for inactive streams if you want to activate them upon request. See Patching streams for details.
-
akamai-patch-papi-property-rule-cpcodePatch PAPI property default rule with a CP code.
-
akamai-patch-papi-property-rule-genericGeneric JSON patch command for Papi Property Default Rule.
-
akamai-patch-papi-property-rule-httpmethodsPatch PAPI property rule HTTP methods.
-
akamai-patch-papi-property-rule-originPatch PAPI property default rule with an origin.
-
akamai-patch-papi-property-rule-siteshieldPatch papi property default rule siteshield.
-
akamai-remove-client-list-entryRemoves an entry from a client list.
-
akamai-remove-element-from-network-listDeprecatedDeprecated. Use “akamai-remove-client-list-entry” instead.
-
akamai-toggle-datastreamActivate/Deactivate the latest version of a DataStream.
-
akamai-update-appsec-config-version-notesUpdate application secuirty configuration version notes command.
-
akamai-update-changeUpdate the certs and trust chains.
-
akamai-update-client-listUpdates a client list.
-
akamai-update-client-list-entryUpdates an entry in a client list.
-
akamai-update-cps-enrollmentUpdates an enrollment with changes. Response type will vary depending on the type and impact of change. For example, changing SANs list may return HTTP 202 Accepted since the operation requires new certificate and network deployment operations, and thus cannot be completed without a change. On the contrary, for example a Technical Contact name change may return HTTP 200 OK assuming there are no active changes and the operation does not require a new certificate. Reference: https://techdocs.akamai.com/cps/reference/put-enrollment Note: Depending on the type of the modification, additional steps might be required to complete the update. These additional steps could be carrying out a "renew" change by resubmitting the CSR, acknowledging the warnings raised then waiting for the certificate to be deployed into Production. However, these additional steps are not included in this command. You need to perform those steps once the update command is completed.
-
akamai-update-cps-enrollment-scheduleUpdates the current deployment schedule.
-
akamai-update-network-list-elementsDeprecatedDeprecated. There is no replacement for this command.
-
akamai-update-propertyUpdate a property for a specific domain.