[x-post from /r/apache] Apache conf question

I posted this on /r/apache but no response

I recently took over managing our AWS account and we have a Beanstalk app. I've ran some security scans on our instance and there's a couple modifications to the apache config I need to make.

Currently, the beanstalk app has an httpd.conf and it inherits all confs in ./conf.d with three other .conf files (including wsgi.conf).

In my searching, people are recommending copying the contents of the wsgi.conf file locally, add the changes and then deploy the new .conf file in the beanstalk config. I would rather not copy the template and create a file to overwrite the existing file if for any reason Amazon changes the default config.

I was hoping to either append the configuration to the end of the wsgi.conf file OR create a new .conf file with the configs.

Does apache care what the file name is? Will this work? For instance, add the file ./conf.d/security.conf with the following contents:

 Header always append X-Frame-Options SAMEORIGIN RewriteEngine on RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK) RewriteRule .* - [F]