summaryrefslogtreecommitdiff
path: root/hacking
diff options
context:
space:
mode:
authormjmayer <mjmayer@ucdavis.edu>2019-05-16 17:36:14 -0700
committerWill Thames <will@thames.id.au>2019-05-17 10:36:14 +1000
commitc8e179fbf1568612bdd5fb41720a25dd192b8caa (patch)
tree2d4dd306cb5e8df668927ffaecda18cf8026e9a1 /hacking
parent32620b7e007152322ba19b19cab474aecd0fbe08 (diff)
downloadansible-c8e179fbf1568612bdd5fb41720a25dd192b8caa.tar.gz
Aws waf region (#48953)
* Add waiter for AWSRegional * Add support for WAF Regional * Add support for regional waf web acl * Remove set_trace, pep formatting * Add paginator for regional_waf * Change name of param for waf_regional This is more in line with how AWS refers to the service. Additional changes made to how client is called. Used ternary to reduce if statements * Change parameter name to waf_regional * Add support for removal waf regional condition * Change parameter from cloudfront to waf_regional * Added state: absent waf rule * Remove set_trace * Add integration tests for waf regional * WIP: adding region parameter to tests * Add support for waf facts module * Add region to waf regional integration tests * Update security policy for waf regional testing * Add type to documentation for waf_regional param
Diffstat (limited to 'hacking')
-rw-r--r--hacking/aws_config/testing_policies/security-policy.json6
1 files changed, 6 insertions, 0 deletions
diff --git a/hacking/aws_config/testing_policies/security-policy.json b/hacking/aws_config/testing_policies/security-policy.json
index b1760a6bec..93bac5dd39 100644
--- a/hacking/aws_config/testing_policies/security-policy.json
+++ b/hacking/aws_config/testing_policies/security-policy.json
@@ -90,6 +90,12 @@
"Resource": [
"arn:aws:logs:{{aws_region}}:{{aws_account}}:log-group:ansible-testing*"
]
+ },
+ {
+ "Sid": "AllowWAFRegionalusage",
+ "Action": "waf-regional:*",
+ "Effect": "Allow",
+ "Resource": "*"
}
]
}