Skip to content

Commit 28a62cf

Browse files
committed
Disable SizeRestrictions_BODY:count
This was left at `count` to monitor for false positives after adding bypass rules. After monitoring for 2 months with only two valid hits (both on `preview-draft` URIs), we are happy to finally disable the override.
1 parent 7450b11 commit 28a62cf

1 file changed

Lines changed: 0 additions & 7 deletions

File tree

  • infra/modules/cloudfront_waf_protection

infra/modules/cloudfront_waf_protection/waf.tf

Lines changed: 0 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -378,13 +378,6 @@ resource "aws_wafv2_web_acl" "this" {
378378
managed_rule_group_statement {
379379
name = "AWSManagedRulesCommonRuleSet"
380380
vendor_name = "AWS"
381-
382-
rule_action_override {
383-
name = "SizeRestrictions_BODY"
384-
action_to_use {
385-
count {} # Switch to count action, to check for false positives after applying new bypass rules
386-
}
387-
}
388381
}
389382
}
390383

0 commit comments

Comments
 (0)