digglife/aws-waf-temp-access
Add GitHub Runner IP to AWS WAF IPSet and/or Security Group with automatic cleanup
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| id | The ID of the WAF IPSet. Required if not using security-group-id. | no | — |
| name | The name of the WAF IPSet. Required if not using security-group-id. | no | — |
| scope | The scope of the WAF IPSet (CLOUDFRONT or REGIONAL) | no | REGIONAL |
| region | The AWS region. Falls back to AWS_REGION env, AWS_DEFAULT_REGION env, then us-east-1. | no | — |
| security-group-id | The ID of the EC2 Security Group. Required if not using id/name. | no | — |
| security-group-description | Description for the Security Group ingress rule | no | Temporary access from GitHub Actions runner |
| security-group-port | The TCP port for the Security Group ingress rule | no | 443 |
| security-group-protocol | The IP protocol for the Security Group ingress rule | no | tcp |
Outputs
| name | description |
|---|---|
| ip-address | The public IP address that was added to the target(s) |
| status | Status of the operation (success or failed) |