Update to set CfnWebACLAssociation only if addWaf is true (#108)

Author: RobHarveyDev

cdk/lib/cognito-passwordless.ts

@@ -1022,11 +1022,11 @@ export class Passwordless extends Construct {
             ],
           }
         );
+        new cdk.aws_wafv2.CfnWebACLAssociation(scope, `WafAssociation${id}`, {
+          resourceArn: this.fido2Api.deploymentStage.stageArn,
+          webAclArn: this.fido2ApiWebACL.attrArn,
+        });
       }
-      new cdk.aws_wafv2.CfnWebACLAssociation(scope, `WafAssociation${id}`, {
-        resourceArn: this.fido2Api.deploymentStage.stageArn,
-        webAclArn: this.fido2ApiWebACL!.attrArn,
-      });
     }
   }
 }