search

aws-solutions / aws-waf-security-automations

This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
https://aws.amazon.com/solutions/aws-waf-security-automations
Apache License 2.0
837 stars 359 forks source link

Error in log parser for uriList (expiration check) #192

Closed mrabczuk closed 2 years ago

mrabczuk commented 3 years ago

Version 3.1.0 Function: merge_outstanding_requesters()

The expiration check in urlList section is using "general" key from config: elif total_diff_min < config['general']['blockPeriod']

while it should be using "uriList" key path e.g. config['uriList'][uri]['blockPeriod']

aijunpeng commented 3 years ago

Thanks for the comment. block period is a general configuration by design. What does your config file look like? Are you getting any errors? Please elaborate so we can better understand the issue.