[PROD] Set up FECFile custom domain with WAF for web-app

[exalate-issue-sync]

Set up FECFile custom domain with WAF for web-app with domain fecfile.fec.gov (unless a different name is chosen?)

Previous notes: https://docs.google.com/document/d/1zFLq3Y-VmUpXOI0cXq_wIhH0ybdgua07s5vrosd6z3o/edit?tab=t.0

We had already done this work but inadvertently deleted the services when spinning down the prod site.

• Set up custom domain service, bind to web app
• Ask cloud.gov for cloudfront distribution URI (only needed for this “apex” route fecfile.fec.gov)
• Make DNS changes to point to cloudfront distribution
• Upgrade to custom waf:

cf update-service

-p domain-with-cdn-dedicated-waf -c '{"alarm_notification_email": "[email protected]"}'

• Test on FEC HQ VPN/zScaler

QA Notes

screenshot of service on [cloud.gov|http://cloud.gov]

url should be accessible at fecfile.fec.gov

DEV Notes

Test on FEC VPN/zScaler

Design

null

See full ticket and images here: FECFILE-1914

[exalate-issue-sync]

akhorsand commented: [~accountid:5b92c509d0b4022bdc51bdf4] [~accountid:712020:2a1493e5-adee-45bd-b27e-868a5c8d3f62] this is listed as a blocker for setting up PROD - is it possible to get more details in here so we can point/refine next week?

[exalate-issue-sync]

Laura Beaufort commented: [~accountid:61b0b42cd5986c006a9e1c94] sorry I’m just now seeing your message. Adding details