Fix: Add missing api path check on APP WAF rule (#901)

cds-snc · Nov 22, 2024 · 9adb41d · 9adb41d
1 parent 11b40f3
commit 9adb41d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/aws/load_balancer/waf.tf b/aws/load_balancer/waf.tf
@@ -538,7 +538,7 @@ resource "aws_wafv2_regex_pattern_set" "valid_app_uri_paths" {
 
   # App paths
   regular_expression {
-    regex_string = "^\\/(?:en|fr)?\\/?(?:(admin|form-builder|forms|id|auth|profile|support|contact|unlock-publishing)(?:\\/[\\w-]+)?)(?:\\/.*)?$"
+    regex_string = "^\\/(?:en|fr)?\\/?(?:(admin|api|form-builder|forms|id|auth|profile|support|contact|unlock-publishing)(?:\\/[\\w-]+)?)(?:\\/.*)?$"
   }
 
   # Static Pages