search

aws-solutions / aws-waf-security-automations

This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
https://aws.amazon.com/solutions/aws-waf-security-automations
Apache License 2.0
852 stars 366 forks source link

Add a option to use a existing WebACL #265

Closed oscaraparicio77 closed 5 months ago

oscaraparicio77 commented 5 months ago

Is your feature request related to a problem? Please describe. We actually have a WebACL associated to a ALB with a lot of custom rules, since cannot be associated two or more WebACL's to a Load Balancer, this is a problem.

Describe the feature you'd like Posibility of this Stack asks for a existing WebACL, give the name, and then it creates all the stuff in that acl already associated with a ALB

Additional context Would be perfect!!

aijunpeng commented 5 months ago

Thank you for submitting this request. However, supporting existing WebACL is out of scope of the WAF solution. The reason is that the out-of-box solution is designed to create its own WebACL that contains a set of WAF rules that the solution supports. With existing WebACL, there are many limitations. For example, the solution won't be able to know other custom rules and potential conflicts, in turn complicates the solution upgrade path. In addition, there are potential limitations from WAFV2 APIs. With that said, you are free to download and customize the source code to fit your specific needs.