diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..109e96f
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,6 @@
+.git
+.gitignore
+.github
+.idea
+docker-compose.yaml
+Dockerfile
diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml
index 8859e39..747026e 100644
--- a/.github/workflows/docs.yaml
+++ b/.github/workflows/docs.yaml
@@ -14,6 +14,8 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: true
+      - name: Copy assets from submodules
+        run: rsync -av --progress */**/docs/assets/ docs/assets --exclude .git --exclude .idea --exclude docs
       - name: Set up AWS credentials
         uses: aws-actions/configure-aws-credentials@v4
         with:
diff --git a/.gitmodules b/.gitmodules
index 41e213f..cf672d2 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -13,3 +13,6 @@
 [submodule "aws/secrets"]
 	path = aws/secrets
 	url = git@github.com:codeforamerica/tofu-modules-aws-secrets.git
+[submodule "datadog/waf"]
+	path = datadog/waf
+	url = git@github.com:codeforamerica/tofu-modules-datadog-waf.git
diff --git a/README.md b/README.md
index ab5d834..f880e13 100644
--- a/README.md
+++ b/README.md
@@ -19,6 +19,7 @@ terraform.
 | AWS      | [secrets][aws-secrets]                         | Manage secrets using AWS Secrets Manager.                                |
 | AWS      | [serverless_database][aws-serverless-database] | Aurora Serverless database cluster.                                      |
 | AWS      | [vpc][aws-vpc]                                 | AWS VPC configuration with networking.                                   |
+| Datadog  | [waf][datadog-waf]                             | Datadog dashboard for monitoring AWS WAF.                                |
 
 ## Contributing
 
@@ -34,5 +35,6 @@ repository, or any of the OpenTofu module repositories.
 [aws-serverless-database]: ./aws/serverless_database/README.md
 [aws-vpc]: ./aws/vpc/README.md
 [contributing]: CONTRIBUTING.md
+[datadog-waf]: https://github.com/codeforamerica/tofu-modules-datadog-waf
 [opentofu]: https://opentofu.org/
 [terraform]: https://www.terraform.io/
diff --git a/datadog/waf b/datadog/waf
new file mode 160000
index 0000000..e523fac
--- /dev/null
+++ b/datadog/waf
@@ -0,0 +1 @@
+Subproject commit e523fac6899383bffd62ab2f113e4d9f3d4fcf15
diff --git a/docs/index.md b/docs/index.md
index 8c13d9c..1262409 100644
--- a/docs/index.md
+++ b/docs/index.md
@@ -9,3 +9,4 @@
 [aws-serverless-database]: modules/aws/serverless-database.md
 [aws-vpc]: modules/aws/vpc.md
 [contributing]: contributing.md
+[datadog-waf]: modules/datadog/waf.md
diff --git a/docs/modules/datadog/waf.md b/docs/modules/datadog/waf.md
new file mode 100644
index 0000000..455286b
--- /dev/null
+++ b/docs/modules/datadog/waf.md
@@ -0,0 +1,3 @@
+--8<-- "datadog/waf/README.md"
+
+[screenshot-dashboard]: ../../assets/dashboard.jpeg