CCM-14211: Fix WAF rules

chris-elliott-nhsd · chris-elliott-nhsd · commit 32f77ba0af79 · 2026-02-25T10:43:00.000Z
diff --git a/infrastructure/terraform/components/cdn/wafv2_web_acl.tf b/infrastructure/terraform/components/cdn/wafv2_web_acl.tf
@@ -195,7 +195,7 @@ resource "aws_wafv2_web_acl" "main" {
                     field_to_match {
                       uri_path {}
                     }
-                    regex_string = "^\\/templates(~[a-zA-Z0-9_\\-]{1,26})?\\/(create|edit|upload)\\-letter\\-template(\\/[a-z0-9\\-]*)?$"
+                    regex_string = "^\\/templates(?:~[a-zA-Z0-9_\\-]{1,26})?\\/(?:(?:create|upload|edit)\\-letter\\-template(?:\\/[a-z0-9\\-]*)?|upload\\-(?:standard\\-english|large\\-print|other\\-language|british\\-sign\\-language)\\-letter\\-template)$"
                     text_transformation {
                       priority = 10
                       type     = "NONE"

Original file line number	Diff line number	Diff line change
`@@ -195,7 +195,7 @@ resource "aws_wafv2_web_acl" "main" {`
`195`	`195`	`field_to_match {`
`196`	`196`	`uri_path {}`
`197`	`197`	`}`
`198`		`- regex_string = "^\\/templates(~[a-zA-Z0-9_\\-]{1,26})?\\/(create\|edit\|upload)\\-letter\\-template(\\/[a-z0-9\\-]*)?$"`
	`198`	`+ regex_string = "^\\/templates(?:~[a-zA-Z0-9_\\-]{1,26})?\\/(?:(?:create\|upload\|edit)\\-letter\\-template(?:\\/[a-z0-9\\-]*)?\|upload\\-(?:standard\\-english\|large\\-print\|other\\-language\|british\\-sign\\-language)\\-letter\\-template)$"`
`199`	`199`	`text_transformation {`
`200`	`200`	`priority = 10`
`201`	`201`	`type = "NONE"`