ignore rule

terraform/deployments/govuk-publishing-infrastructure/wafs.tf

@@ -10,6 +10,12 @@ resource "aws_wafv2_web_acl" "default" {
     allow {}
   }
 
+  lifecycle {
+    ignore_changes = [
+      rule
+    ]
+  }
+
   rule {
     name     = "x-always-block_web_acl_rule"
     priority = 1
@@ -132,6 +138,12 @@ resource "aws_wafv2_web_acl" "backend_public" {
     allow {}
   }
 
+  lifecycle {
+    ignore_changes = [
+      rule
+    ]
+  }
+
   # this rule matches any request that contains the header X-Always-Block: true
   # we use it as a simple sanity check / acceptance test from smokey to ensure that
   # the waf is enabled and processing requests
@@ -345,6 +357,12 @@ resource "aws_wafv2_web_acl" "bouncer_public" {
     allow {}
   }
 
+  lifecycle {
+    ignore_changes = [
+      rule
+    ]
+  }
+
   # this rule matches any request that contains the header X-Always-Block: true
   # we use it as a simple sanity check / acceptance test from smokey to ensure that
   # the waf is enabled and processing requests
@@ -522,6 +540,13 @@ resource "aws_wafv2_web_acl" "cache_public" {
     allow {}
   }
 
+  lifecycle {
+    ignore_changes = [
+      rule,
+      custom_response_body
+    ]
+  }
+
   visibility_config {
     cloudwatch_metrics_enabled = true
     metric_name                = "cache-public-web-acl"