In this case, both properties are set to “true” to enable them. The SampledRequestsEnabled property allows you to set whether or not to collect traffic that matches the rule. Visibilit圜onfig is a setting related to CloudWatch and sampled traffic.ĬloudWatchMetricsEnabled property allows you to set whether or not metrics collection by CloudWatch is required. In this case, set “AWSManagedRulesAmazonIpReputationList” and “AWS” respectively. Specify which managed rule to use in the Name and VendorName properties inside this property. When using managed rules, use the ManagedRuleGroupStatement property. Set the rule itself to be used in the Statement property. In this case, we will use a single managed rule, so we set it to “0”. The rules are numbered in order from 0, and the rule with the lowest number is evaluated first.

The Priority property is an item related to the order of priority between rules. Since we will not modify it this time, we will set an empty object to the None property. The OverrideAction property is an item that allows you to modify the action of the rule to be used.

In this case, we will use “AWS-AWSManagedRulesAmazonIpReputationList” from among the rules (groups) prepared from the beginning called AWS Managed Rules. The Rules property is used to define the rules for allowing/blocking traffic. Set the name of the Web ACL to be created in the Name property. In this case, “Allow” is selected and no customization is performed. You can choose either “Allow” or “Block,” and you can customize the behavior of each action. The DefaultAction property is the setting for traffic that did not match the rule. Resources: WebACL: Type: AWS::WAFv2::WebACL Properties: DefaultAction: Allow: ' SampledRequestsEnabled: true Scope: REGIONAL Visibilit圜onfig: CloudWatchMetricsEnabled: true MetricName: !Ref Prefix SampledRequestsEnabled: true Code language: YAML ( yaml )

Aws alb waf