Control: WAF regional web ACL should have at least one rule or rule group attached
Description
This control checks if a WAF regional Web ACL contains any WAF rules or rule groups. The rule is non-compliant if there are no WAF rules or rule groups present within a Web ACL.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.waf_regional_web_acl_rule_attachedSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.waf_regional_web_acl_rule_attached --shareSQL
This control uses a named query:
select arn as resource, case when rules is null or jsonb_array_length(rules) = 0 then 'alarm' else 'ok' end as status, case when rules is null or jsonb_array_length(rules) = 0 then title || ' has no attached rules.' else title || ' has ' || jsonb_array_length(rules) || ' rule(s) attached.' end as reason , region, account_idfrom aws_wafregional_web_acl;