瀏覽代碼

Excludes 2 rules for Cust SH WAF

* UNIXShellCommandsVariables_BODY
* UNIXShellCommandsVariables_QUERYARGUMENTS

These appear in searches.

To be tagged v5.0.9
Fred Damstra [afs macbook] 3 年之前
父節點
當前提交
3cd6d3e111
共有 1 個文件被更改,包括 4 次插入0 次删除
  1. 4 0
      base/splunk_servers/customer_searchhead/waf.tf

+ 4 - 0
base/splunk_servers/customer_searchhead/waf.tf

@@ -23,6 +23,10 @@ module "waf" {
     "SQLi_QUERYARGUMENTS",
     "SQLi_BODY",
   ]
+  excluded_rules_AWSManagedRulesUnixRuleSet = [
+    "UNIXShellCommandsVariables_BODY",
+    "UNIXShellCommandsVariables_QUERYARGUMENTS",
+  ]
 
   # These are passed through and should be the same for module
   tags           = merge(local.standard_tags, var.tags)