Browse Source

Enables blocking for GHE WAF

To be tagged v4.3.0
Fred Damstra [afs macbook] 3 years ago
parent
commit
07b76d7e5a
1 changed files with 3 additions and 3 deletions
  1. 3 3
      base/github/elb.tf

+ 3 - 3
base/github/elb.tf

@@ -29,9 +29,9 @@ module "elb" {
     "default"                               = true # Default action. False = count
     "custom"                                = true # XDR Custom Rules. False = count
     "admin"                                 = true # Block admin pages.
-    "AWSManagedRulesCommonRuleSet"          = false
-    "AWSManagedRulesAmazonIpReputationList" = false
-    "AWSManagedRulesKnownBadInputsRuleSet"  = false
+    "AWSManagedRulesCommonRuleSet"          = true
+    "AWSManagedRulesAmazonIpReputationList" = true
+    "AWSManagedRulesKnownBadInputsRuleSet"  = true
     "AWSManagedRulesSQLiRuleSet"            = false # Irrelevant, module is disabled
     "AWSManagedRulesLinuxRuleSet"           = false # Irrelevant, module is disabled
     "AWSManagedRulesUnixRuleSet"            = false # Irrelevant, module is disabled