Adds optional waf field for setting up Web Application Firewall on Cloudfront

Author: orfin

README.md

@@ -44,6 +44,7 @@ custom:
   apiCloudFront:
     domain: my-custom-domain.com
     certificate: arn:aws:acm:us-east-1:000000000000:certificate/00000000-1111-2222-3333-444444444444
+    waf: 00000000-0000-0000-0000-000000000000
     logging:
       bucket: my-bucket.s3.amazonaws.com
       prefix: my-prefix

index.js

@@ -59,6 +59,7 @@ class ServerlessApiCloudFrontPlugin {
     this.prepareOrigins(distributionConfig);
     this.prepareComment(distributionConfig);
     this.prepareCertificate(distributionConfig);
+    this.prepareWaf(distributionConfig);
   }
 
   prepareLogging(distributionConfig) {
@@ -107,6 +108,16 @@ class ServerlessApiCloudFrontPlugin {
     }
   }
 
+  prepareWaf(distributionConfig) {
+    const waf = this.getConfig('waf', null);
+
+    if (waf !== null) {
+      distributionConfig.WebACLId = waf;
+    } else {
+      delete distributionConfig.WebACLId;
+    }
+  }
+
   getConfig(field, defaultValue) {
     return _.get(this.serverless, `service.custom.apiCloudFront.${field}`, defaultValue)
   }

package.json

@@ -1,6 +1,6 @@
 {
   "name": "serverless-api-cloudfront",
-  "version": "0.9.1",
+  "version": "0.9.2",
   "engines": {
     "node": ">=4.0"
   },

resources.yml

@@ -54,6 +54,7 @@ Resources:
           IncludeCookies: 'false'
           Bucket: ''
           Prefix: ''
+        WebACLId: waf-id
 
 Outputs:
   ApiDistribution: