Vulnerabilities
Misconfiguration
Runtime Security
Compliance
AWS > ELB >

ELBv2 WAF Enabled

MEDIUM
Source
CloudSploit
ID
elbv2-waf-enabled
management console

ELBv2 WAF Enabled

Ensure that all Application Load Balancers have WAF enabled.

Enabling WAF allows control over requests to the load balancer, allowing or denying traffic based off rules in the Web ACL

  1. Enter the WAF service. 2. Enter Web ACLs and filter by the region the Application Load Balancer is in. 3. If no Web ACL is found, Create a new Web ACL in the region the ALB resides and in Resource type to associate with web ACL, select the Load Balancer.
Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2024 Aqua Security Software Ltd.   Privacy Policy | Terms of Use