From d23321db6b39ac950aaf5d9594ef6705513dcd5b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ole=20Volds=C3=A6ter?= <ole.voldsater@uib.no>
Date: Mon, 19 Apr 2021 14:22:13 +0200
Subject: [PATCH] =?UTF-8?q?vi=20=C3=A9=20laiv!!?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
---
aws/beta.ordbok.uib.no_stack.yaml | 65 -------------------------------
1 file changed, 65 deletions(-)
diff --git a/aws/beta.ordbok.uib.no_stack.yaml b/aws/beta.ordbok.uib.no_stack.yaml
index 673b1cb9..87056757 100644
--- a/aws/beta.ordbok.uib.no_stack.yaml
+++ b/aws/beta.ordbok.uib.no_stack.yaml
@@ -73,70 +73,6 @@ Resources:
Principal:
CanonicalUser: !GetAtt CloudFrontOriginIdentity.S3CanonicalUserId
- ITAIpSet:
- Type: "AWS::WAF::IPSet"
- Properties:
- IPSetDescriptors:
- - Type: "IPV4"
- Value: "129.177.0.0/16"
- - Type: "IPV4"
- Value: "82.134.66.114/32"
- - Type: "IPV4"
- Value: "51.174.68.58/32"
- Name: "allowed IPs"
-
- APImatch:
- Type: "AWS::WAF::ByteMatchSet"
- Properties:
- Name: "API paths"
- ByteMatchTuples:
- - FieldToMatch:
- Type: "URI"
- TargetString: "/api"
- TextTransformation: "NONE"
- PositionalConstraint: "EXACTLY"
- - FieldToMatch:
- Type: "URI"
- TargetString: "/api/"
- TextTransformation: "NONE"
- PositionalConstraint: "STARTS_WITH"
-
- ITARule:
- Type: "AWS::WAF::Rule"
- Properties:
- MetricName: "ITARule"
- Name: "ITARule"
- Predicates:
- - Type: "IPMatch"
- Negated: false
- DataId: !Ref ITAIpSet
-
- APIRule:
- Type: "AWS::WAF::Rule"
- Properties:
- MetricName: "APIRule"
- Name: "APIRule"
- Predicates:
- - Type: "ByteMatch"
- Negated: false
- DataId: !Ref APImatch
-
- ACL:
- Type: "AWS::WAF::WebACL"
- Properties:
- DefaultAction:
- Type: "BLOCK"
- Name: "intern ITA"
- MetricName: "WebACL"
- Rules:
- - Action:
- Type: "ALLOW"
- Priority: 1
- RuleId: !Ref ITARule
- - Action:
- Type: "ALLOW"
- Priority: 5
- RuleId: !Ref APIRule
APICachePolicy:
Type: "AWS::CloudFront::CachePolicy"
Properties:
@@ -218,7 +154,6 @@ Resources:
AcmCertificateArn: !Ref CertificateArn
MinimumProtocolVersion: TLSv1.1_2016
SslSupportMethod: sni-only
- WebACLId: !Ref ACL
Tags:
- Key: Application
Value: !Ref DomainName
--
GitLab