feat: Add WAF to Pages Diagrams (#160)

cloud-gov · Sep 25, 2024 · 6c690b2 · 6c690b2
1 parent cc80562
commit 6c690b2
Show file tree

Hide file tree

Showing 6 changed files with 14 additions and 5 deletions.
diff --git a/out/diagrams/pages/public_customer_site_requests.png b/out/diagrams/pages/public_customer_site_requests.png
diff --git a/out/diagrams/pages/public_customer_site_requests.svg b/out/diagrams/pages/public_customer_site_requests.svg
diff --git a/out/diagrams/pages/public_flow.png b/out/diagrams/pages/public_flow.png
diff --git a/out/diagrams/pages/public_flow.svg b/out/diagrams/pages/public_flow.svg
diff --git a/source/diagrams/pages/public_customer_site_requests.mmd b/source/diagrams/pages/public_customer_site_requests.mmd
@@ -22,6 +22,7 @@ flowchart TB
   aws_load_balancer[Load Balancer / Router <br/> AWS Application Load Balancer]:::processStyle
   pages_proxy[Pages Proxy Application <br/> *NGINX]:::processStyle
   pages_builder[Site Builder <br/> Generates Site Files]:::processStyle
+  waf[Web Application Firewall]:::processStyle
 
   %% Databases
   s3[(Published Website <br/> File Storage <br/> *AWS S3)]:::dbStyle
@@ -34,8 +35,9 @@ flowchart TB
   webhook[Automated Webhook<br/>Starts Build]:::processStyle
 
   %% Public Flow
-  user --  Site Web Request <br /> HTTPS/443 --> public_auth --> aws_cdn
-  aws_cdn -- Site Web Response <br /> HTTPS/443 --> public_auth --  Site Web Response <br /> HTTPS/443  --> user
+  user --  Site Web Request <br /> HTTPS/443 --> public_auth --> waf --> aws_cdn
+  waf -- Site Web Response <br /> HTTPS/443 --> public_auth --  Site Web Response <br /> HTTPS/443  --> user
+  aws_cdn --> waf
   aws_cdn -- Site Web Request <br /> HTTPS/443 --> aws_load_balancer
   aws_load_balancer -- Site Web Response <br /> HTTPS/443 --> aws_cdn
   aws_load_balancer -- Site Web Request <br /> HTTPS/443 --> pages_proxy
@@ -78,6 +80,7 @@ flowchart TB
 
     subgraph aws_com[AWS Commercial cloud]
       subgraph cg_platform_2[cloud.gov platform]
+        waf
         aws_cdn
       end
     end

diff --git a/source/diagrams/pages/public_flow.mmd b/source/diagrams/pages/public_flow.mmd
@@ -15,14 +15,18 @@ flowchart TB
   aws_load_balancer[Load Balancer / Router <br/> AWS Application Load Balancer]:::processStyle
   pages_proxy[Pages Proxy Application <br/> *NGINX]:::processStyle
 
+  %% Services
+  waf[Web Application Firewall]:::processStyle
+
   %% Decisions
   is_cached{Is request cached}:::decisionStyle
 
   %% Databases
   s3[(Object Store <br/> *AWS S3)]:::dbStyle
 
   %% Flow
-  user -- Views Static Content <br/> HTTPS/443 --> is_cached
+  user -- Views Static Content <br/> HTTPS/443 --> waf
+  waf -- Views Static Content <br/> HTTPS/443 --> is_cached
   is_cached -- Yes --> aws_cdn
   is_cached -- No --> aws_load_balancer
   aws_cdn -- Proxy Request <br /> HTTPS/443 --> aws_load_balancer
@@ -32,6 +36,8 @@ flowchart TB
 
   %% Layout
   subgraph AWS Commercial Cloud
+    waf
+    is_cached
     subgraph cloud.gov platform
       aws_cdn
     end