Class CcCloudfrontWaf

CloudKitect CloudFront WAF Component, by default this WAF enables the following AWS managed WAF Rules

• AWSManagedRulesCommonRuleSet
• AWSManagedRulesAmazonIpReputationList
• AWSManagedRulesKnownBadInputsRuleSet
• AWSManagedRulesAnonymousIpList
• AWSManagedRulesSQLiRuleSet

Default Alarms

Examples

Default Usage

new CcCloudfrontWaf(this, "LogicalId", {});
Copy

Custom Configuration

new CcCloudfrontWaf(this, "LogicalId", {
   ccDoNotAddAnonymousIpWafRules: true
});
Copy

Compliance

It addresses the following compliance requirements, when used with CloudFront Distribution

PCI, HIPAA, APRA, MAS, NIST4