@aws/nx-plugin-mcp 1.0.0-rc.51 → 1.0.0-rc.52
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -140,6 +140,10 @@ module "user_identity" {
|
|
|
140
140
|
</Fragment>
|
|
141
141
|
</Infrastructure>
|
|
142
142
|
|
|
143
|
+
:::caution[`EC2MetaDataSSRF_QUERYARGUMENTS` is set to Count]
|
|
144
|
+
This rule flags loopback addresses in query arguments as [SSRF](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-list.html) attempts, which would block local sign-in since the Hosted UI receives a `localhost` `redirect_uri`. It is therefore set to [Count](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-rule-action.html#web-acl-rule-action-count) while local callback URLs are configured — matches are still logged, and every other rule blocks. Remove the local callback URLs to restore it to Block.
|
|
145
|
+
:::
|
|
146
|
+
|
|
143
147
|
## Infrastructure Usage
|
|
144
148
|
|
|
145
149
|
<Infrastructure>
|