Skip to content

Commit 93c4734

Browse files
Do not apply the regular WAF rules for /jupyter links
1 parent f8548c8 commit 93c4734

File tree

1 file changed

+29
-0
lines changed

1 file changed

+29
-0
lines changed

obp_private_alb_config/private-alb-waf.tf

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -65,6 +65,35 @@ resource "aws_wafv2_web_acl" "basic_protection" {
6565
}
6666
}
6767

68+
rule {
69+
name = "obi-allow-all-jupyterhub"
70+
priority = 6
71+
72+
action {
73+
allow {}
74+
}
75+
76+
statement {
77+
byte_match_statement {
78+
field_to_match {
79+
uri_path {}
80+
}
81+
positional_constraint = "STARTS_WITH"
82+
search_string = "/jupyter"
83+
text_transformation {
84+
priority = 0
85+
type = "NONE"
86+
}
87+
}
88+
89+
visibility_config {
90+
cloudwatch_metrics_enabled = false
91+
metric_name = "obi_allow-jupyterhub-traffic"
92+
sampled_requests_enabled = false
93+
}
94+
}
95+
96+
6897
rule {
6998
name = "aws-common-ruleset"
7099
priority = 10

0 commit comments

Comments
 (0)