Feature/add waf rules

[louishourcade]

Feature or Bugfix

• Feature

Detail

• As mentioned in PyJWT Changelog, the verify argument is deprecated and should be replaced by options={"verify_signature": Bool}
• With this PR, customers can deploy two additional types of custom rules to the WAF protecting CloudFront and API Gateway (if internet-facing deployment). First one is geolocation filtering, second one is IP Set filtering. cdk.json file edited for this purpose0

Relates

• Customer requirement for WAF

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.