chore(infra): Deny connections from US-sanctioned countries with HTTP 403 (#7462)

Implementing the remainder of the legally required block. Will be
applied on Dec 9th, as we notified customers.
This commit is contained in:
Jamil
2024-12-06 12:26:30 -08:00
committed by GitHub
parent 0cdfd1fd4f
commit 45bfe0f2a3

View File

@@ -74,7 +74,7 @@ resource "google_compute_security_policy" "default" {
match {
expr {
# Required by US law due to sanctions.
expression = "request.path.matches('/sign_up') && origin.region_code.matches('^RU|BY|KP|IR|SY|CU|VE|XC|XD|SD|MM$')"
expression = "origin.region_code.matches('^RU|BY|KP|IR|SY|CU|VE|XC|XD|SD|MM$')"
}
}
}