turbot/aws_compliance

Control: A WAFV2 web ACL should have at least one rule or rule group

Description

This control checks whether a WAFV2 web access control list (web ACL) contains at least one WAF rule or WAF rule group. The control fails if a web ACL does not contain any WAF rules or rule groups.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.wafv2_web_acl_rule_attached

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.wafv2_web_acl_rule_attached --share

SQL

This control uses a named query:

wafv2_web_acl_rule_attached

Tags