v1.7.0

Add `scope_down_statement` Support @RoseSecurity (#87)

what

AWS highly recommends safeguarding against HTTP request floods; they advise implementing two rate limiting rules for web traffic. The initial rule employs AWS WAF's rate-based rules to automatically block IP addresses of malicious actors if the number of requests in a 5-minute sliding window surpasses a predefined threshold. The second rule focuses on a more detailed approach, allowing for targeted blocking. This is achieved by using scope_down_statements to refine the criteria for blocking, enhancing the precision of the defense mechanism.

why

• Adds scope_down_statements with byte matching support

references

• AWS WAF – Rate-based rules
• Rate-based rule request rate limiting behavior
• Terraform Resource