Medium WAF Regional

AWS WAF Classic Regional web ACLs should have at least one rule or rule group

NISTISO 27001

Description

Confirms that AWS WAF Regional web ACLs contain at least one rule or rule group.


Remediation

To add rules or rule groups to an empty AWS WAF Regional web ACL, refer to the AWS WAF Developer Guide.

Steps

  1. Navigate to the AWS WAF Regional console.
  2. Select the appropriate Web ACL.
  3. Add at least one rule or rule group to the Web ACL.

Compliance

NISTISO 27001