search

aws-solutions / aws-waf-security-automations

This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
https://aws.amazon.com/solutions/aws-waf-security-automations
Apache License 2.0
843 stars 361 forks source link

Issue #142 RuleGroup for FW Manager #146

Closed cgol closed 1 year ago

cgol commented 4 years ago

Issue #142

Description of changes: Added a RuleGroup to the WAF template that allows use of some of the automations such as BadBot List in Firewall Manager, meaning that an bad bot IP hitting the honeypot will be added to a deny list that will then block the IP access across all attached cloudfront distributions in multiple accounts (or ALBs or whatever).

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

aijunpeng commented 4 years ago

Thanks for your contribution. We have added your request to our solution backlog items and it will be considered in future solution releases.

cgol commented 4 years ago

The SQL Injection and Cross Site Scripting rules can be split out into rule groups as well and referenced in the WebACL, thus allowing the rule groups to be reused by Firewall Manager.

rakshb commented 1 year ago

Closing this since there is a similar request (#175) . We will evaluate both together and consider in a future release.