From fe625486c7d4c990c133e00ff36a76fa67131dac Mon Sep 17 00:00:00 2001
From: Pat Heard <patrick.heard@cds-snc.ca>
Date: Fri, 21 Jul 2023 14:57:54 -0400
Subject: [PATCH] fix: ignore WordPress password GET requests (#1346)

Update the CloudWatch `error` metric filter to ignore all
password reset requests that include the word `error`.
---
 infrastructure/terragrunt/aws/alarms/locals.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/infrastructure/terragrunt/aws/alarms/locals.tf b/infrastructure/terragrunt/aws/alarms/locals.tf
index 021c259f5..bbda67839 100644
--- a/infrastructure/terragrunt/aws/alarms/locals.tf
+++ b/infrastructure/terragrunt/aws/alarms/locals.tf
@@ -13,7 +13,7 @@ locals {
   wordpress_errors_skip = [
     "AH01276",
     "AH01630",
-    "action=lostpassword&error=invalidkey",
+    "action=lostpassword&error",
     "GET /notification-gc-notify/wp-json/wp/v2/pages",
   ]
   wordpress_warnings = [