This rule ensures AWS WAF Classic Regional rules contain at least one condition to adequately inspect and control web traffic.
Rule | AWS WAF Classic Regional rules should have at least one condition |
Framework | AWS Foundational Security Best Practices |
Severity | ✔ Medium |
Rule Description:
AWS WAF Classic Regional rules should include at least one condition for AWS Foundational Security Best Practices. This ensures that the WAF is configured to provide an additional layer of security by actively monitoring and filtering traffic based on defined security best practices.
Troubleshooting Steps:
If the AWS WAF Classic Regional rule does not have a condition for AWS Foundational Security Best Practices, follow these troubleshooting steps:
Necessary Codes:
An example of a condition for AWS Foundational Security Best Practices:
{ "Type": "IPMatch", "DataId": "AWSManagedRulesAdminProtectionRuleSet" }
Remediation Steps:
By following these steps and adding a condition for AWS Foundational Security Best Practices to the AWS WAF Classic Regional rule, you can enhance the security posture of your application or website.