foo.tf

resource "google_compute_security_policy" "waf-security-policy" {
  name = "waf-policy"
  type = "CLOUD_ARMOR_EDGE"
  rule {
    action   = "allow"
    priority = "2147483647"
    match {
      versioned_expr = "SRC_IPS_V1"
      config {
        src_ip_ranges = ["*"]
      }
    }
    description = "default rule"
  }

}