Medium
WAF
AWS WAF Classic global web ACLs should have at least one rule or rule group
NISTISO 27001
Description
Confirms that AWS WAF global web ACLs contain at least one rule or rule group.
Remediation
To add rules or rule groups to an empty AWS WAF global web ACL, refer to the AWS WAF Developer Guide.
Steps
- Navigate to the AWS WAF console.
- Select the appropriate Web ACL.
- Add at least one rule or rule group to the Web ACL.
Compliance
NISTISO 27001