Interface AkamaiSiteshieldWebACLProps

Defines the option implemented for Finnair WAFv2 WebACL construct

interface AkamaiSiteshieldWebACLProps {
    allowAkamaiSiteShieldIPs?: boolean;
    oldOrganizationAccount?: boolean;
    overrideRules?: IResolvable | (IResolvable | RuleProperty)[];
    webACLScope: WAFv2WebACLType;
}

Properties

allowAkamaiSiteShieldIPs?: boolean

Will add a default allow rule with metric that allows traffic from Akamai siteshield IPs

This is only available only in region eu-east-1, eu-north-1 or us-east-1 and also for webACLScope CLOUDFRONT.

oldOrganizationAccount?: boolean

Used if allowAkamaiSiteShieldIPs is set to true.

This parameter is used to defined which common Akamai Site shield Waf rule group will be used in the configuration. Default value is false;

overrideRules?: IResolvable | (IResolvable | RuleProperty)[]

If you want a more complex rule than only akamai, you can benefit from the construct but still create you own rule set.

Type of WebACL to be used

Use CLOUDFRONT for cloudfront only association. Use REGIONAL for anny other ressource association.