in transcribe-ui-backend/provisioning/lib/construct/ip-restriction.ts [49:59]
applyApi(api: apigateway.RestApi) {
const region = cdk.Stack.of(this).region
const restApiId = api.restApiId
const stageName = api.deploymentStage.stageName
const stageArn = `arn:aws:apigateway:${region}::/restapis/${restApiId}/stages/${stageName}`
new waf.CfnWebACLAssociation(this, 'apply-webacl-apigw', {
webAclArn: this.webAcl.attrArn,
resourceArn: stageArn
})
}