top of page
AWS Foundational Security Best Practice
WAF.8
A WAF global web ACL should have at least one rule or rule group
Severity
Cloud Platforms
Resources
MEDIUM
AWS
Amazon Web Application Firewall
This control checks whether a WAF global web ACL contains any WAF rules or WAF rule groups. This control fails if a web ACL does not contain any WAF rules or WAF rule groups.
bottom of page