add more rate limit WAF rules and custom header for cloudfront

cds-snc / covid-alert-server

Exposure Notification: Diagnosis Server implementation / Notification d’exposition : Mise en œuvre du serveur de diagnostic

Apache License 2.0

298 stars 31 forks source link

Closed stonith closed 4 years ago

stonith commented 4 years ago

add 5 rate limit rules of 100 requests / ip / 5min to submission endpoint
add 1000 requests / ip / 5min rate limit rule to retrieval cloudfront distribution
add a shared custom header between cloudfront and retrieval ALB endpoint so that requests can only come from cloudfront
update README for new TF_VAR env vars

closes: #200