Block non-telemetry paths at the WAF

XMLWordPrintableJSON

    • Type: Task
    • Resolution: Done
    • Priority: Major - P3
    • 2.11.1
    • Affects Version/s: None
    • Component/s: None
    • None
    • Not Needed
    • Developer Tools

      The CloudFront distribution attracts constant resources scanning, which sometimes returns 501 and together with a low traffic fires CloudWatch alarms.

      Add a WAF rule allowing only the telemetry event paths (/v1/identify, /v1/new-connection, /v1/session-ended) and blocking everything else at the edge, so scanner traffic never reaches `mongodb-dev-tools-telemetry-<env>` S3.

        1. image.png
          image.png
          138 kB

            Assignee:
            Alena Khineika
            Reporter:
            Alena Khineika
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: