aws-solutions / aws-waf-security-automations

This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
https://aws.amazon.com/solutions/aws-waf-security-automations
Apache License 2.0
837 stars 359 forks source link

Launching Version 3.2.0 #200

Closed AndreasPilgerstorfer closed 2 years ago

AndreasPilgerstorfer commented 2 years ago

Describe the bug It is not possible to launch the latest release 3.2.0 by uploading it on AWS Cloudfront.

To Reproduce

  1. Download the source code zip of release version 3.2.0
  2. Extract the files
  3. Open AWS Cloudformation
  4. Click on Create Stack -> With new resources (Standard)
  5. Choose Upload a template file and upload the aws-waf-security-automations.template file
  6. Choose anamefor the stack
  7. Enter all desired fields (only set the "Activate Bad Bot Protection" to true and turn off (set to no) everything else)
  8. Entered an existing S3 bucket in the "Application Access Log Bucket Name" field
  9. Click on next -> change nothing on this page -> Click on next
  10. Accept the checkboxes in the Capabilities area and create stack

Expected behavior I expected the Stack to be launched in AWS Cloudfront without receiving the status "ROLLBACK_COMPLETE"

Please complete the following information about the solution:

Screenshots If applicable, add screenshots to help explain your problem (please DO NOT include sensitive information). image

aijunpeng commented 2 years ago

Thanks for reporting your issue. The GitHub source code is meant for user customization. You can't directly launch the template included in the source code without building the source, which is documented in readme. If you want to launch the out-of-box solution, please go to the solution's landing page: https://aws.amazon.com/solutions/implementations/aws-waf-security-automations/. You can also find more detailed information in the implementation guide https://docs.aws.amazon.com/solutions/latest/aws-waf3-security-automations/welcome.html