feat: waf service to support IPV6 CIDRs

hamlet-io · Sep 16, 2024 · ebdea18 · ebdea18
1 parent d259d8c
commit ebdea18
Showing 1 changed file with 16 additions and 6 deletions.
diff --git a/aws/services/waf/resource.ftl b/aws/services/waf/resource.ftl
@@ -225,19 +225,29 @@
 
         [#switch hamletResourceType ]
             [#case AWS_WAFV2_IPSET_RESOURCE_TYPE]
+
+                [#local addresses = asFlattenedArray(
+                    filters?map(filter ->
+                        getWAFValueList(filter.Targets, valueSet)
+                    )
+                )]
+
+                [#-- Matches on IPv6 Values, but not IPv4 --]
+                [#if (addresses?first)?matches(r"^.*:.*:.*\/(12[0-8]|1[01][0-9]|[1-9]?[0-9])$") ]
+                    [#local ipversion = "IPV6"]
+                [#else]
+                    [#local ipversion = "IPV4"]
+                [/#if]
+
                 [@cfResource
                     id=id
                     type=cfnResourceType
                     properties=
                         {
                             "Name": name,
                             "Scope" : regional?then("REGIONAL","CLOUDFRONT"),
-                            "IPAddressVersion" : "IPV4",
-                            "Addresses": asFlattenedArray(
-                                filters?map(filter ->
-                                    getWAFValueList(filter.Targets, valueSet)
-                                )
-                            )
+                            "IPAddressVersion" : ipversion,
+                            "Addresses": addresses
                         }
                 /]
                 [#break]