aws-solutions / aws-waf-security-automations

This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
https://aws.amazon.com/solutions/aws-waf-security-automations
Apache License 2.0
837 stars 359 forks source link

Stack fails with Invalid scope - Template 3.1.0 - Cloudfront attach - Region EU (Frankfurt) #187

Closed casper5822 closed 1 year ago

casper5822 commented 3 years ago

Hello, i just run the last template version with cloudfront resouce in EU (Frankfurt). I gest an error on stack creation with "invalid scope".

How can i fix this? Is the template work in EU (Frankfurt) with cloudfront?

Thanks in advance.

Full error is:

error reason: the scope is not valid., field: scope_value, parameter: cloudfront (service: wafv2, status code: 400, request id: f11107cd-44df-407e-aa70-f97e4270e35d, extended request id: null)

rakshb commented 3 years ago

@casper5822 If you choose CLOUDFRONT as your endpoint, you must create your WAFV2 resources in the US East (N. Virginia) Region, us-east-1. We also have a note about this in the Implementation Guide under Automated Deployment section (https://docs.aws.amazon.com/solutions/latest/aws-waf3-security-automations/aws-waf3-security-automations.pdf#welcome)