Excludes the EC2MetaDataSSRF_Body from WAF rules for customer SH
@@ -14,7 +14,8 @@ module "waf" {
excluded_rules_AWSManagedRulesCommonRuleSet = [
"SizeRestrictions_BODY",
- "RestrictedExtensions_URIPATH"
+ "RestrictedExtensions_URIPATH",
+ "EC2MetaDataSSRF_Body"
]
excluded_rules_AWSManagedRulesSQLiRuleSet = [
"SQLi_QUERYARGUMENTS"