Limit request body sizes in WAF

unstubbable · Mar 15, 2024 · 549e566 · 549e566
1 parent 862d53a
commit 549e566
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/apps/aws-app/cdk/waf-stack.ts b/apps/aws-app/cdk/waf-stack.ts
@@ -26,6 +26,24 @@ export class WafStack extends cdk.Stack {
       rules: [
         {
           priority: 1,
+          name: `request-body-size-limit`,
+          visibilityConfig: {
+            cloudWatchMetricsEnabled: false,
+            metricName: `${webAclName}-request-body-size-limit`,
+            sampledRequestsEnabled: true,
+          },
+          statement: {
+            sizeConstraintStatement: {
+              fieldToMatch: {body: {}},
+              comparisonOperator: `GT`,
+              size: 1024,
+              textTransformations: [{priority: 0, type: `NONE`}],
+            },
+          },
+          action: {block: {customResponse: {responseCode: 413}}},
+        },
+        {
+          priority: 2,
           name: `rate-limit`,
           visibilityConfig: {
             cloudWatchMetricsEnabled: false,