Table: aws_wafv2_web_acls
This table shows data for Wafv2 Web ACLs.
https://docs.aws.amazon.com/waf/latest/APIReference/API_WebACL.html (opens in a new tab)
The primary key for this table is arn.
Columns
| Name | Type |
|---|---|
| _cq_id | uuid |
| _cq_parent_id | uuid |
| account_id | utf8 |
| region | utf8 |
| tags | json |
| resources_for_web_acl | list<item: utf8, nullable> |
| arn (PK) | utf8 |
| default_action | json |
| id | utf8 |
| name | utf8 |
| visibility_config | json |
| association_config | json |
| capacity | int64 |
| captcha_config | json |
| challenge_config | json |
| custom_response_bodies | json |
| description | utf8 |
| label_namespace | utf8 |
| managed_by_firewall_manager | bool |
| post_process_firewall_manager_rule_groups | json |
| pre_process_firewall_manager_rule_groups | json |
| rules | json |
| token_domains | list<item: utf8, nullable> |
| logging_configuration | json |
Example Queries
These SQL queries are sampled from CloudQuery policies and are compatible with PostgreSQL.
AWS WAF Classic global web ACL logging should be enabled
(
SELECT
'AWS WAF Classic global web ACL logging should be enabled' AS title,
account_id,
arn AS resource_id,
CASE
WHEN logging_configuration IS NULL OR logging_configuration = '{}'
THEN 'fail'
ELSE 'pass'
END
AS status
FROM
aws_waf_web_acls
)
UNION
(
SELECT
'AWS WAF Classic global web ACL logging should be enabled' AS title,
account_id,
arn AS resource_id,
CASE
WHEN logging_configuration IS NULL OR logging_configuration = '{}'
THEN 'fail'
ELSE 'pass'
END
AS status
FROM
aws_wafv2_web_acls
);