chore: suppress CloudWatch error false-positives (#1328)

Update the CloudWatch error metric filter to ignore `GET` requests to the Notify wp-json endpoint. This is because these will often contain error tokens as part of the `GET` request parameters during fuzzing attacks.
cds-snc · Jul 17, 2023 · d798851 · d798851
1 parent 713c2c4
commit d798851
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/infrastructure/terragrunt/aws/alarms/locals.tf b/infrastructure/terragrunt/aws/alarms/locals.tf
@@ -13,8 +13,7 @@ locals {
   wordpress_errors_skip = [
     "AH01276",
     "AH01630",
-    "error=invalidkey",
-    "slug=error",
+    "GET /notification-gc-notify/wp-json/wp/v2/pages",
   ]
   wordpress_warnings = [
     "Warning",