Setting custom HSTS header on WAF blocked requests. (#1010)

* Setting custom HSTS header on WAF blocked requests. Also adding missing variable to dev eks hcl * fix formatting
cds-snc · Nov 7, 2023 · e840674 · e840674
1 parent d7d308b
commit e840674
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/aws/eks/waf.tf b/aws/eks/waf.tf
@@ -279,6 +279,10 @@ resource "aws_wafv2_web_acl" "notification-canada-ca" {
       block {
         custom_response {
           response_code = 204
+          response_header {
+            name  = "Strict-Transport-Security"
+            value = "max-age=63072000; includeSubDomains; preload"
+          }
         }
       }
     }