Setup WAF

[briri]

Setup the Web Application Firewall (WAF) use the following rules as a basis but refine based on our endpoints and assets

• AWS-AWSManagedRulesAmazonIpReputationList
• AWS-AWSManagedRulesCommonRuleSet
• AWS-AWSManagedRulesKnownBadInputsRuleSet
• AWS-AWSManagedRulesLinuxRuleSet
• AWS-AWSManagedRulesPHPRuleSet
• AWS-AWSManagedRulesWordPressRuleSet

Add the WAF to CloudFormation

[briri]

Initial WAF added to CloudFormation stack and is associated with our API Gateway.

We may want to setup a CloudFront distribution and add it to this WAF to:

• secure our Cognito User Pool https://aws.amazon.com/blogs/security/protect-public-clients-for-amazon-cognito-by-using-an-amazon-cloudfront-proxy/
• serve up the DMP upload HTML form

[briri]

Need to also add a Route53 and ACM