AWS WAF web ACL

aws Web application firewallaws-waf

Web application firewall that inspects HTTP and HTTPS requests to CloudFront, API Gateway, load balancers and other AWS front doors.

Provider: aws
Kind: Web application firewall
Category: Security
Official docs: https://docs.aws.amazon.com/waf/latest/developerguide/what-is-aws-waf.html

Properties · 4 set by this component

property	type	values	required	kind default	this component
bodyInspectionLimitKb · component property	integer	—	no	16	inherited
botProtection	boolean	—	no	—	▸ false
customRuleCount	integer	—	no	—	inherited
defaultAction · component property	enum	allow \| block	no	—	inherited
logging · component property	boolean	—	no	false	inherited
managed	boolean	—	no	false	▸ true
managedRuleSet	string	—	no	—	inherited
mode	enum	detection \| prevention \| off	no	—	▸ prevention
rateLimiting	boolean	—	no	—	▸ false
scope · component property	enum	cloudfront \| regional	no	—	inherited
webAclCapacityUnits · component property	integer	—	no	5000	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "waf", component: "aws-waf" }

Other Web application firewall products · 13

Web Application Firewallalibaba-wafalibabacloudwaf AWS WAF Classicaws-waf-classicawswaf Azure Web Application Firewallazure-web-application-firewallazurewaf Firewall for AIcloudflare-firewall-for-aicloudflarewaf Cloudflare WAFcloudflare-wafcloudflarewaf Corazacorazawaf Imperva Application Securityimpervawaf ModSecuritymodsecuritywaf NAXSInaxsiwaf Generic web application firewallwafwaf Google Cloud Armorgoogle-cloud-armorgcpwaf reCAPTCHA Enterprisegoogle-recaptcha-enterprisegcpwaf Web Application Firewalloci-wafociwaf

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# AWS WAF web ACL: managed layer-7 firewall for HTTP/HTTPS requests to CloudFront, API Gateway,
3# Application Load Balancer, AppSync, Cognito, App Runner and Verified Access; rule actions are
4# terminating and the web ACL default action must be Allow or Block ("What is AWS WAF?",
5# "Setting the protection pack (web ACL) default action in AWS WAF"). Bot Control and rate-based rules
6# are opt-in, logging is opt-in, capacity is 5,000 WCUs and the body inspection limit is 16 KB by
7# default for CloudFront and API Gateway ("AWS WAF quotas").
8schemaVersion: "1"
9type: "component"
10id: "aws-waf"
11kind: "waf"
12provider: "aws"
13docs: "https://docs.aws.amazon.com/waf/latest/developerguide/what-is-aws-waf.html"
14aliases: ["WAF"]
15defaults:
16  managed: true
17  mode: "prevention"
18  botProtection: false
19  rateLimiting: false
20properties:
21  defaultAction:
22    type: "enum"
23    values: ["allow", "block"]
24  webAclCapacityUnits:
25    type: "integer"
26    default: 5000
27  bodyInspectionLimitKb:
28    type: "integer"
29    default: 16
30  logging:
31    type: "boolean"
32    default: false
33  scope:
34    type: "enum"
35    values: ["cloudfront", "regional"]

The same page as markdown, for an agent: /catalogue/components/aws-waf.md