appsync-associated-with-waf
Checks if AWS AppSync APIs are associated with AWS WAFv2 web access control lists (ACLs). The rule is NON_COMPLIANT for an AWS AppSync API if it is not associated with a web ACL.
Identifier: APPSYNC_ASSOCIATED_WITH_WAF
Resource Types: AWS::AppSync::GraphQLApi
Trigger type: Periodic
AWS Region: All supported AWS regions except US ISO West, Asia Pacific (Jakarta), Africa (Cape Town), US ISO East, Middle East (UAE), Asia Pacific (Hyderabad), Asia Pacific (Malaysia), US ISOB East, Asia Pacific (Melbourne), AWS GovCloud (US-East), AWS GovCloud (US-West), Israel (Tel Aviv), Canada West (Calgary), Europe (Spain), Europe (Zurich) Region
Parameters:
- wafWebAclARNs (Optional)
- Type: CSV
-
Comma-separated list of Amazon Resource Names (ARNs) for authorized web ACLs.
AWS CloudFormation template
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.