If you previously configured the Generic Firewall Denylist integration and want to add support for Basic Auth, you can update your existing CloudFormation stack using using the AWS CloudFormation console.

1. Sign in to the AWS CloudFormation console.
2. Search for your previously created stack.
3. Click Update stack > Make a direct update.
4. In the Prepare template section, select Replace an existing template.
5. In the Specify template section, click Upload a template file.
6. Click Choose file, and then select the deny_list_cfn JSON file.
7. Click Next.
8. Enter a username for HTTP Basic Authentication. For example, admin.
9. Enter a comma-separated list of the IP addresses for the firewalls that require access to the denylist to apply it to your network traffic. For example, 0.0.0.0,8.8.8.8.
   Note: These are IP addresses that need to read the denylist, not the IP addresses included in the denylist. The IP addresses should be public WAN IP addresses, not management IP addresses.
10. Click Next.
11. On the Configure stack options page, keep the default options selected.
12. Select the I acknowledge that AWS CloudFormation might create IAM resources checkbox.
    This stack creates a lambda role with access to read the bucket that contains the denylist.
13. Click Next.
14. Click Submit.
15. Navigate back to the stack in the AWS CloudFormation console.
16. Save the URLs for BasicAuthDenyListUrl and GetDenyListIPAllowlistUrl in a safe location.
17. In any existing products previously configured to use the Generic Firewall Denylist integration, update the URL with the value found in GetDenyListIPAllowlistUrl.