feat: Support label_match_statement

cloudposse / terraform-aws-waf

https://cloudposse.com/accelerate

Apache License 2.0

41 stars 57 forks source link

feat: Support label_match_statement #100

Open amontalban opened 2 months ago

amontalban commented 2 months ago

what

This PR allows creating rules based on labels. It is specially useful if you want to block specific regions of a country.

why

We need to block certain regions that are part of Ukraine due to commercial embargoes (See examples).

references

addepar-tg commented 2 months ago

This would also be extremely useful for us to be able to allow traffic based on paths not matching regular expressions, without the ability to use not statements.

addepar-tg commented 2 months ago

FWIW I have tested this extensively today for our use case, and this functionality seems to work perfectly.