From 45bfe0f2a39b9490082193f883ff34e5fb8ee4f1 Mon Sep 17 00:00:00 2001 From: Jamil Date: Fri, 6 Dec 2024 12:26:30 -0800 Subject: [PATCH] chore(infra): Deny connections from US-sanctioned countries with HTTP 403 (#7462) Implementing the remainder of the legally required block. Will be applied on Dec 9th, as we notified customers. --- terraform/modules/google-cloud/apps/elixir/network.tf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/terraform/modules/google-cloud/apps/elixir/network.tf b/terraform/modules/google-cloud/apps/elixir/network.tf index 79390d835..da9e68509 100644 --- a/terraform/modules/google-cloud/apps/elixir/network.tf +++ b/terraform/modules/google-cloud/apps/elixir/network.tf @@ -74,7 +74,7 @@ resource "google_compute_security_policy" "default" { match { expr { # Required by US law due to sanctions. - expression = "request.path.matches('/sign_up') && origin.region_code.matches('^RU|BY|KP|IR|SY|CU|VE|XC|XD|SD|MM$')" + expression = "origin.region_code.matches('^RU|BY|KP|IR|SY|CU|VE|XC|XD|SD|MM$')" } } }