aquasecurity / aquasecurity/cloudsploit
API Gateway AWS WAF Integration Check
Open
- Dominant language
- JavaScript
- Stars
- 3.8k
- Forks
- 751
- Avg merge
- 11d 9h
- Merged PRs (30d)
- 3
Description
Check that AWS WAF is enabled for published APIs in API Gateway to protect against attacks.
High Level process
- Get APIs in a region
- Get stages for each API
- Check to see if there is an WAF Web ACL ARN assigned
Contributor guide
Research direction
Start with the AWS API Gateway integration and its region, API, and stage traversal. Verify each stage's WAF Web ACL ARN and report stages where it is absent; completion is coverage of every published API stage.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, javascript
- Domain
- api, cloud, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100