module "aws_waf" {
  source = "../../../modules/wafv2"

  env_prefix     = var.platform.prefix
  project_group  = var.platform.name
  name           = "docs_whitelist"
  scope          = "CLOUDFRONT"
  action         = "allow"
  ipv4_addresses = module.main_sg_map.whitelist_ip_list
  ipv6_addresses = []
}

data "aws_wafv2_web_acl" "ioc_web_acl_global" {
  name  = "${local.account_alias}_web_acl"
  scope = "CLOUDFRONT"
}