Medium
WAF
Regional
AWS WAF Classic Regional rule groups should have at least one rule
NISTISO 27001
Description
This control checks whether an AWS WAF Regional rule group has at least one rule. The control fails if no rules are present within a rule group.
Remediation
To add rules to an empty rule group, refer to the AWS WAF Developer Guide.
Steps
- Navigate to the AWS WAF Regional console.
- Select the appropriate Rule Group.
- Add at least one rule to the Rule Group.
Compliance
NISTISO 27001