fix: Route53 healthcheck all regions (#605)

Update the Route53 healthcheck to run from all AWS regions.

This is being done to keep a higher number of API lambda functions
warm to see if it helps with the Notify timeout errors.

Author: patheard

terragrunt/aws/api/route53.tf

@@ -17,7 +17,6 @@ resource "aws_route53_health_check" "scan_files_A" {
   resource_path     = "/healthcheck"
   failure_threshold = "5"
   request_interval  = "30"
-  regions           = ["us-east-1", "us-west-1", "us-west-2"]
 
   tags = {
     CostCentre = var.billing_code

terragrunt/aws/api/waf.tf

@@ -14,62 +14,6 @@ resource "aws_wafv2_web_acl" "api_waf" {
     allow {}
   }
 
-  rule {
-    name     = "IpAllowList"
-    priority = 1
-
-    action {
-      allow {}
-    }
-
-    statement {
-      ip_set_reference_statement {
-        arn = aws_wafv2_ip_set.ip_allowlist.arn
-      }
-    }
-
-    visibility_config {
-      cloudwatch_metrics_enabled = true
-      metric_name                = "IpAllowList"
-      sampled_requests_enabled   = true
-    }
-  }
-
-  rule {
-    name     = "NorthAmericaOnly"
-    priority = 2
-
-    action {
-      dynamic "block" {
-        for_each = var.enable_waf == true ? [""] : []
-        content {
-        }
-      }
-
-      dynamic "count" {
-        for_each = var.enable_waf == false ? [""] : []
-        content {
-        }
-      }
-    }
-
-    statement {
-      not_statement {
-        statement {
-          geo_match_statement {
-            country_codes = ["CA", "US"]
-          }
-        }
-      }
-    }
-
-    visibility_config {
-      cloudwatch_metrics_enabled = true
-      metric_name                = "NorthAmericaOnly"
-      sampled_requests_enabled   = true
-    }
-  }
-
   rule {
     name     = "APIInvalidPath"
     priority = 5
@@ -470,19 +414,3 @@ resource "aws_wafv2_web_acl_logging_configuration" "api_waf" {
   log_destination_configs = [aws_kinesis_firehose_delivery_stream.api_waf.arn]
   resource_arn            = aws_wafv2_web_acl.api_waf.arn
 }
-
-# Azure US East CIDR blocks that are being identified as being in Germany
-# These should be allowed.
-resource "aws_wafv2_ip_set" "ip_allowlist" {
-  provider = aws.us-east-1
-
-  name               = "ip_allowlist"
-  scope              = "CLOUDFRONT"
-  ip_address_version = "IPV4"
-  addresses = [
-    "172.172.0.0/15",
-    "172.174.0.0/16",
-    "172.175.0.0/16",
-    "172.176.0.0/15"
-  ]
-}