Migrate Amazon WAF service to v2

wazuh / wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

https://wazuh.com/

Other

10.77k stars 1.65k forks source link

Migrate Amazon WAF service to v2 #23361

Open javiersanchz opened 5 months ago

javiersanchz commented 5 months ago

Wazuh version	Component	Epic branch
5.0.0	AWS	epic/23361-migrate-aws-waf-v2

Description

The objective of this EPIC is to migrate our current WAF to v2 in our AWS module.

Steps for the migration:

Modify AWS module to process logs from WAF v2
Add new parameter to iterate over different ACLs
Perform unit and integration tests
Update documentation of Amazon Web Application Firewall (WAF)

Related issues

[x] #22572
[x] #23363
[x] #23365
[x] #23364

nikki-quant commented 3 months ago

Hi Wazuh team! My team are evaluating Wazuh at the moment. From this ticket I am guessing that AWS WAF V2 isn't supported at all yet and that you're aiming to add integration with it in the 5.0.0 release?

javiersanchz commented 3 months ago

Hi @nikki-quant,

we are still working on it to implement AWS WAF V2, which will be available starting from version 5.0.0. You can follow the progress on this issue.

So far, this is our implementation with AWS WAF available: https://documentation.wazuh.com/current/cloud-security/amazon/services/supported-services/waf.html

nikki-quant commented 3 months ago

Nice, thanks for confirming that @javiersanchz :)