search

aws-solutions / aws-waf-security-automations

This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
https://aws.amazon.com/solutions/aws-waf-security-automations
Apache License 2.0
852 stars 367 forks source link

Template format error for us-west-1, us-east-2 #24

Closed hsanjuan closed 7 years ago

hsanjuan commented 7 years ago

Hi, I am getting a:

Creating CloudFormation stack failed: ValidationError: Template format error: Unrecognized resource types: [AWS::WAFRegional::IPSet, AWS::WAFRegional::WebACL, AWS::WAFRegional::Rule, AWS::WAFRegional::XssMatchSet, AWS::WAFRegional::SqlInjectionMatchSet]

with the alb template. Any idea ?

hvital commented 7 years ago

Need to check the current AWS WAF for ALB support for those regions. Direct link: https://aws.amazon.com/pt/about-aws/global-infrastructure/regional-product-services/

hsanjuan commented 7 years ago

In fact, according to AWS support, there was/is a problem with AWS Cloudformation support for WAF regional not working in regions where WAF regional is supported. Manual creation of the resources via web interface worked back then.

I have no idea if this is fixed or not, but I'll close this anyway as this seems to be the wrong place for it.

shreekarthic commented 6 years ago

I agree with hsanjuan. As of today, using Cloudformation for WAFRegional in some region is currently not supported yet.

gsdirkus commented 6 years ago

We are in eu-central-1 where ALB and wafRegional is supported but the cloudformation does not support the Resource type. Real pity that thsi is not working. Is there no way to get this to setup and make the lambda changes that update the lists manualy?

vainkop commented 6 years ago

eu-central-1 Template validation error: Template format error: Unrecognized resource types: [AWS::WAFRegional::IPSet, AWS::WAFRegional::WebACL, AWS::WAFRegional::Rule, AWS::WAFRegional::XssMatchSet, AWS::WAFRegional::SqlInjectionMatchSet]

According to https://aws.amazon.com/about-aws/global-infrastructure/regional-product-services/ we should be able to do that, but no :(

direvus commented 6 years ago

Same here, in ap-southeast-2 (Sydney)

trycatchjames commented 6 years ago

+1

ctacka commented 6 years ago

+1 in eu-central-1

MrRager commented 6 years ago

Same in us-east-2

bluemalkin commented 6 years ago

Same issue in ap-southeast-2

It would be nice if AWS made templates that actually worked !

Hallian commented 6 years ago

Same issue at eu-central-1

jcuk commented 6 years ago

+1 Works in us-east-1 but not in us-east-2 :(

hvital commented 6 years ago

CloudFormation currently supports AWS WAF for ALB resources in the following regions:

• US East (N. Virginia) – us-east-1 • US West (N. California) – us-west-1 • US West (Oregon) – us-west-2 • Asia Pacific (Tokyo) – ap-northeast-1 • EU (Ireland) – eu-west-1

We are continually working on having feature parity across other regions.

direvus commented 6 years ago

This appears to be resolved in ap-southeast-2 (Sydney) now. I was able to create an AWS::WAFRegional::IPSet resource

hvital commented 6 years ago

UPDATE: CloudFormation currently supports AWS WAF for ALB resources in the following regions:

• US East (N. Virginia) - us-east-1 • US East (Ohio) - us-east-2 • US West (N. California) - us-west-1 • US West (Oregon) - us-west-2 • Asia Pacific (Sydney) - ap-southeast-2 • Asia Pacific (Tokyo) - ap-northeast-1 • EU (Frankfurt) - eu-central-1 • EU (Ireland) - eu-west-1

We are continually working on having feature parity across other regions.

kryachkov commented 5 years ago

@hvital what about eu-north-1?