SP-2451 - Add Shared WAF to Incident Response #minor

ministryofjustice · Nov 26, 2024 · 2f155bc · 2f155bc
1 parent 77b532f
commit 2f155bc
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/terraform/loadbalancer.tf b/terraform/loadbalancer.tf
@@ -13,6 +13,16 @@ resource "aws_lb" "loadbalancer" {
   }
 }
 
+resource "aws_wafv2_web_acl_association" "shared_waf" {
+  resource_arn = aws_lb.loadbalancer.arn
+  web_acl_arn  = data.aws_wafv2_web_acl.shared.arn
+}
+
+data "aws_wafv2_web_acl" "shared" {
+  name  = "shared-${terraform.workspace}-web-acl"
+  scope = "REGIONAL"
+}
+
 resource "aws_lb_target_group" "tg" {
   name_prefix          = "respon"
   port                 = 80