Medium WAF

AWS WAF Classic global rule groups should have at least one rule

NISTISO 27001

Description

This control checks whether an AWS WAF global rule group contains any rules. The control fails if no rules are present within a rule group.


Remediation

To add rules to an empty AWS WAF global rule group, refer to the AWS WAF Developer Guide.

Steps

  1. Navigate to the AWS WAF console.
  2. Select the appropriate Rule Group.
  3. Add at least one rule to the Rule Group.

Compliance

NISTISO 27001