Also block HTTP

alan-turing-institute · Jun 28, 2024 · 5fee5e9 · 5fee5e9
1 parent 867ec85
commit 5fee5e9
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/data_safe_haven/infrastructure/programs/sre/firewall.py b/data_safe_haven/infrastructure/programs/sre/firewall.py
@@ -250,6 +250,10 @@ def __init__(
                             description="Deny external Ubuntu Snap Store upload and login access",
                             name="DenyUbuntuSnapcraft",
                             protocols=[
+                                network.AzureFirewallApplicationRuleProtocolArgs(
+                                    port=int(Ports.HTTP),
+                                    protocol_type=network.AzureFirewallApplicationRuleProtocolType.HTTP,
+                                ),
                                 network.AzureFirewallApplicationRuleProtocolArgs(
                                     port=int(Ports.HTTPS),
                                     protocol_type=network.AzureFirewallApplicationRuleProtocolType.HTTPS,