Script to update WAF with a bunch of IP Addresses from file

waf-ip-updater.sh

#!/usr/bin/env bash

if [[ ! -f ips.txt ]]; then
	echo "ERROR: missing file ./ips.txt"
	exit 1
fi

if [[ ! ${1} ]]; then
	echo "ERROR: ip-set-id not provided as \${1}"
	exit 1
fi

ipSetID=${1}
echo "ip-set-id=$ipSetID"


echo "Formatting command from ./ips.txt"

echo "[" > ips.json

while read -r ip; do
cat << EOF >> ips.json
{
"Action": "INSERT",
"IPSetDescriptor":
{
"Type": "IPV4",
"Value": "${ip}/32"
}
}
,
EOF
done < ips.txt

sed -i '' -e '$ d' ips.json

echo "]" >> ips.json

jq '.' ips.json > _.json
mv _.json ips.json


aws waf-regional update-ip-set \
	--ip-set-id "${ipSetID}"  \
	--updates file://ips.json \
	--change-token "$(aws waf-regional get-change-token | jq '.ChangeToken' | tr -d '\"')"