aws-solutions / aws-waf-security-automations

This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
https://aws.amazon.com/solutions/aws-waf-security-automations
Apache License 2.0
837 stars 359 forks source link

Error on rollback - WAFReputationListsSet #194

Closed kunal999 closed 2 years ago

kunal999 commented 3 years ago

Describe the bug Upon trying to create a new stack, there was an error due to S3's limitation of only being able to create a single event notification on an S3 bucket with overlapping prefixes/suffixes (FYI: this should be noted in the considerations section of the documentation). The stack started a rollback, however, the rollback failed upon trying deletion of WAFReputationListsSet. Error message:- Operation would result in exceeding resource limits. (Service: AWSWAF; Status Code: 400; Error Code: WAFLimitsExceededException; Request ID: 45db77d3-c43a-4bf9-b2b9-46dd41cf5482; Proxy: null)

To Reproduce

Expected behavior Rollback should succeed and the whole stack including all resources should be deleted.

Please complete the following information about the solution:

aijunpeng commented 2 years ago

Thanks for reporting the issue. It's likely been caused by exceeding the WAF classic service api call limit. The issue should be transitory. Can you delete the stack again and see if it succeeds this time?

kunal999 commented 2 years ago

Yeah deletion works, thanks