[PRMP-1149] Update CloudFront firewall to allow for upload of files (#546)

steph-torres-nhs · web-flow · commit 67c7fecfd426 · 2025-12-23T09:28:09.000Z
diff --git a/infrastructure/modules/firewall_waf_v2/local.tf b/infrastructure/modules/firewall_waf_v2/local.tf
@@ -7,7 +7,7 @@ locals {
       name                    = "AWSCoreRuleSet"
       managed_rule_name       = "AWSManagedRulesCommonRuleSet"
       cloudwatch_metrics_name = "AWS-core-ruleset"
-      excluded_rules          = var.api ? ["SizeRestrictions_BODY"] : []
+      excluded_rules          = ["SizeRestrictions_BODY"]
       bypass                  = ["Yes"]
     },
     {

Original file line number	Diff line number	Diff line change
`@@ -7,7 +7,7 @@ locals {`
`7`	`7`	`name = "AWSCoreRuleSet"`
`8`	`8`	`managed_rule_name = "AWSManagedRulesCommonRuleSet"`
`9`	`9`	`cloudwatch_metrics_name = "AWS-core-ruleset"`
`10`		`- excluded_rules = var.api ? ["SizeRestrictions_BODY"] : []`
	`10`	`+ excluded_rules = ["SizeRestrictions_BODY"]`
`11`	`11`	`bypass = ["Yes"]`
`12`	`12`	`},`
`13`	`13`	`{`