Merge pull request #3 from Samseppiol/master

Allow modification of default action via config file value

Author: Guslington

tests/iplists.test.yaml

@@ -3,6 +3,8 @@ test_metadata:
   name: iplists
   description: IP white and black lists
 
+default_block: true
+
 ipsets:
   WhitelistOne:
     desc: ips to whitelist for my waf

wafv2.cfndsl.rb

@@ -80,6 +80,8 @@
     end
   end
 
+  default_block = external_parameters.fetch(:default_block, false)
+
   WAFv2_WebACL(:WAF) {
     Name FnSub("${EnvironmentName}-#{component_name}")
     Description FnSub("#{component_name}")
@@ -89,9 +91,7 @@
       CloudWatchMetricsEnabled: cloudwatch['enabled'],
       MetricName: FnSub("#{cloudwatch['metric_name_prefix']}WAFWebACL")
     })
-    DefaultAction({
-      Allow: {}
-    })
+    DefaultAction default_block ? ({Block: {}}) : ({Allow: {}})
     Rules(waf_rules)
   }