Kaynağa Gözat

Merge pull request #376 from mdr-engineering/feature/bp_MSOCI-2060_portal-waf-disable-rule

Updates Portal WAF Rules
Brad Poulton 3 yıl önce
ebeveyn
işleme
a2b3dabfad
1 değiştirilmiş dosya ile 5 ekleme ve 0 silme
  1. 5 0
      base/customer_portal/waf.tf

+ 5 - 0
base/customer_portal/waf.tf

@@ -8,6 +8,11 @@ module "waf" {
   resource_arn = aws_alb.portal.arn
   fqdns = keys(module.public_dns_record.forward) # first entry in list will be the WAF name
 
+  excluded_rules_AWSManagedRulesCommonRuleSet = [
+    "SizeRestrictions_BODY",
+    "GenericRFI_BODY",             # Blocks portal lambda MSOCI-2060
+  ]
+
   # These are passed through and should be the same for module
   tags = merge(var.standard_tags, var.tags)
   aws_partition = var.aws_partition