Преглед изворни кода

Excludes 2 rules for Cust SH WAF

* UNIXShellCommandsVariables_BODY
* UNIXShellCommandsVariables_QUERYARGUMENTS

These appear in searches.

To be tagged v5.0.9
Fred Damstra [afs macbook] пре 3 година
родитељ
комит
3cd6d3e111
1 измењених фајлова са 4 додато и 0 уклоњено
  1. 4 0
      base/splunk_servers/customer_searchhead/waf.tf

+ 4 - 0
base/splunk_servers/customer_searchhead/waf.tf

@@ -23,6 +23,10 @@ module "waf" {
     "SQLi_QUERYARGUMENTS",
     "SQLi_BODY",
   ]
+  excluded_rules_AWSManagedRulesUnixRuleSet = [
+    "UNIXShellCommandsVariables_BODY",
+    "UNIXShellCommandsVariables_QUERYARGUMENTS",
+  ]
 
   # These are passed through and should be the same for module
   tags           = merge(local.standard_tags, var.tags)