aws-wafwebacl-alb
| Reference Documentation: | https://docs.aws.amazon.com/solutions/latest/constructs/ |
| Language | Package |
|---|---|
|
|
|
|
|
|
|
|
|
Overview
This AWS Solutions Construct implements an AWS WAF web ACL connected to an Application Load Balancer.
Here is a minimal deployable pattern definition:
Example
Pattern Construct Props
| Name | Type | Description |
|---|---|---|
|
existingLoadBalancerObj |
The existing Application Load Balancer Object that will be protected with the WAF web ACL. Note that a WAF web ACL can only be added to a configured Application Load Balancer, so this construct only accepts an existing ApplicationLoadBalancer and does not accept applicationLoadBalancerProps. |
|
|
existingWebaclObj? |
Optional - existing instance of a WAF web ACL, providing both this and |
|
|
webaclProps? |
Optional user-provided props to override the default props for the AWS
WAF web ACL. To use a different collection of managed rule sets, specify
a new rules property. Use our
|
Pattern Properties
| Name | Type | Description |
|---|---|---|
|
webacl |
Returns an instance of the waf.CfnWebACL created by the construct. |
|
|
loadBalancer |
Returns an instance of the Application Load Balancer Object created by the pattern. |
Default settings
Out of the box implementation of the Construct without any override will set the following defaults:
AWS WAF
-
Deploy a WAF web ACL with 7 AWS managed rule groups.
-
AWSManagedRulesBotControlRuleSet
-
AWSManagedRulesKnownBadInputsRuleSet
-
AWSManagedRulesCommonRuleSet
-
AWSManagedRulesAnonymousIpList
-
AWSManagedRulesAmazonIpReputationList
-
AWSManagedRulesAdminProtectionRuleSet
-
AWSManagedRulesSQLiRuleSet
Note that the default rules can be replaced by specifying the rules property of CfnWebACLProps
-
-
Send metrics to Amazon CloudWatch
Application Load Balancer
-
User provided Application Load Balancer object is used as-is
Architecture
Github
Go to the Github repo