【AWS】特定のパスへのアクセスを特定のIPアドレスからのみに制限する

function handler(event) {
    var request = event.request;
    var uri = request.uri;
    var clientIP = event.viewer.ip;

    var TARGET_PATHS = [
        '/wp-login.php',
        '/wp-admin'
    ];
    var IP_WHITELIST = [
        'xxx.xxx.xxx.xxx',
    ];

    if (TARGET_PATHS.some(path => uri.includes(path)) && !IP_WHITELIST.includes(clientIP)) {
        return {
            statusCode: 403,
            statusDescription: 'Forbidden'
        };
    }

    return request;
}