Skip to content

Commit 59eb43e

Browse files
committed
Adding waf priorities to generator
1 parent e68263b commit 59eb43e

File tree

1 file changed

+26
-0
lines changed

1 file changed

+26
-0
lines changed

operations/_scripts/generate/generate_vars_terraform.sh

Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -158,18 +158,31 @@ if [[ $(alpha_only "$AWS_WAF_ENABLE") == true ]]; then
158158
aws_waf_log_retention_days=$(generate_var aws_waf_log_retention_days $AWS_WAF_LOG_RETENTION_DAYS)
159159
aws_waf_additional_tags=$(generate_var aws_waf_additional_tags $AWS_WAF_ADDITIONAL_TAGS)
160160
aws_waf_rule_rate_limit=$(generate_var aws_waf_rule_rate_limit $AWS_WAF_RULE_RATE_LIMIT)
161+
aws_waf_rule_rate_limit_priority=$(generate_var aws_waf_rule_rate_limit_priority $AWS_WAF_RULE_RATE_LIMIT_PRIORITY)
161162
aws_waf_rule_managed_rules=$(generate_var aws_waf_rule_managed_rules $AWS_WAF_RULE_MANAGED_RULES)
163+
aws_waf_rule_managed_rules_priority=$(generate_var aws_waf_rule_managed_rules_priority $AWS_WAF_RULE_MANAGED_RULES_PRIORITY)
162164
aws_waf_rule_managed_bad_inputs=$(generate_var aws_waf_rule_managed_bad_inputs $AWS_WAF_RULE_MANAGED_BAD_INPUTS)
165+
aws_waf_rule_managed_bad_inputs_priority=$(generate_var aws_waf_rule_managed_bad_inputs_priority $AWS_WAF_RULE_MANAGED_BAD_INPUTS_PRIORITY)
163166
aws_waf_rule_ip_reputation=$(generate_var aws_waf_rule_ip_reputation $AWS_WAF_RULE_IP_REPUTATION)
167+
aws_waf_rule_ip_reputation_priority=$(generate_var aws_waf_rule_ip_reputation_priority $AWS_WAF_RULE_IP_REPUTATION_PRIORITY)
164168
aws_waf_rule_anonymous_ip=$(generate_var aws_waf_rule_anonymous_ip $AWS_WAF_RULE_ANONYMOUS_IP)
169+
aws_waf_rule_anonymous_ip_priority=$(generate_var aws_waf_rule_anonymous_ip_priority $AWS_WAF_RULE_ANONYMOUS_IP_PRIORITY)
165170
aws_waf_rule_bot_control=$(generate_var aws_waf_rule_bot_control $AWS_WAF_RULE_BOT_CONTROL)
171+
aws_waf_rule_bot_control_priority=$(generate_var aws_waf_rule_bot_control_priority $AWS_WAF_RULE_BOT_CONTROL_PRIORITY)
166172
aws_waf_rule_geo_block_countries=$(generate_var aws_waf_rule_geo_block_countries $AWS_WAF_RULE_GEO_BLOCK_COUNTRIES)
173+
aws_waf_rule_geo_block_countries_priority=$(generate_var aws_waf_rule_geo_block_countries_priority $AWS_WAF_RULE_GEO_BLOCK_COUNTRIES_PRIORITY)
167174
aws_waf_rule_geo_allow_only_countries=$(generate_var aws_waf_rule_geo_allow_only_countries $AWS_WAF_RULE_GEO_ALLOW_ONLY_COUNTRIES)
175+
aws_waf_rule_geo_allow_only_countries_priority=$(generate_var aws_waf_rule_geo_allow_only_countries_priority $AWS_WAF_RULE_GEO_ALLOW_ONLY_COUNTRIES_PRIORITY)
168176
aws_waf_rule_user_arn=$(generate_var aws_waf_rule_user_arn $AWS_WAF_RULE_USER_ARN)
177+
aws_waf_rule_user_arn_priority=$(generate_var aws_waf_rule_user_arn_priority $AWS_WAF_RULE_USER_ARN_PRIORITY)
169178
aws_waf_rule_sqli=$(generate_var aws_waf_rule_sqli $AWS_WAF_RULE_SQLI)
179+
aws_waf_rule_sqli_priority=$(generate_var aws_waf_rule_sqli_priority $AWS_WAF_RULE_SQLI_PRIORITY)
170180
aws_waf_rule_linux=$(generate_var aws_waf_rule_linux $AWS_WAF_RULE_LINUX)
181+
aws_waf_rule_linux_priority=$(generate_var aws_waf_rule_linux_priority $AWS_WAF_RULE_LINUX_PRIORITY)
171182
aws_waf_rule_unix=$(generate_var aws_waf_rule_unix $AWS_WAF_RULE_UNIX)
183+
aws_waf_rule_unix_priority=$(generate_var aws_waf_rule_unix_priority $AWS_WAF_RULE_UNIX_PRIORITY)
172184
aws_waf_rule_admin_protection=$(generate_var aws_waf_rule_admin_protection $AWS_WAF_RULE_ADMIN_PROTECTION)
185+
aws_waf_rule_admin_protection_priority=$(generate_var aws_waf_rule_admin_protection_priority $AWS_WAF_RULE_ADMIN_PROTECTION_PRIORITY)
173186
fi
174187

175188
#-- AWS EFS --#
@@ -551,18 +564,31 @@ $aws_waf_logging_enable
551564
$aws_waf_log_retention_days
552565
$aws_waf_additional_tags
553566
$aws_waf_rule_rate_limit
567+
$aws_waf_rule_rate_limit_priority
554568
$aws_waf_rule_managed_rules
569+
$aws_waf_rule_managed_rules_priority
555570
$aws_waf_rule_managed_bad_inputs
571+
$aws_waf_rule_managed_bad_inputs_priority
556572
$aws_waf_rule_ip_reputation
573+
$aws_waf_rule_ip_reputation_priority
557574
$aws_waf_rule_anonymous_ip
575+
$aws_waf_rule_anonymous_ip_priority
558576
$aws_waf_rule_bot_control
577+
$aws_waf_rule_bot_control_priority
559578
$aws_waf_rule_geo_block_countries
579+
$aws_waf_rule_geo_block_countries_priority
560580
$aws_waf_rule_geo_allow_only_countries
581+
$aws_waf_rule_geo_allow_only_countries_priority
561582
$aws_waf_rule_user_arn
583+
$aws_waf_rule_user_arn_priority
562584
$aws_waf_rule_sqli
585+
$aws_waf_rule_sqli_priority
563586
$aws_waf_rule_linux
587+
$aws_waf_rule_linux_priority
564588
$aws_waf_rule_unix
589+
$aws_waf_rule_unix_priority
565590
$aws_waf_rule_admin_protection
591+
$aws_waf_rule_admin_protection_priority
566592
567593
#-- EFS --#
568594
$aws_efs_enable

0 commit comments

Comments
 (0)