Medium
WAF
Regional
AWS WAF rules should have CloudWatch metrics enabled
NIST 800-53
Description
Ensures CloudWatch metrics are enabled for AWS WAF rules and rule groups.
Remediation
To enable CloudWatch metrics for AWS WAF rules and rule groups, configure the VisibilityConfig to enable CloudWatchMetricsEnabled for each rule group.
Steps
- Open the AWS WAF console.
- Navigate to 'Rule groups' in the left navigation pane.
- Select the rule group that needs CloudWatch metrics enabled.
- Edit the rule group configuration.
- In the 'Visibility configuration' section, enable 'CloudWatch metrics'.
- Save the rule group configuration.
Compliance
NIST 800-53